2-249
Catalyst 6500 Series Switch Command Reference—Release8.4
OL-6244-01
Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands set acl mac-packet-classify
set acl mac-packet-classify
To set MAC-based ACL lookups for all packet types on a VLAN, use the set acl mac-packet-classify
command.
set acl mac-packet-classify {vlans | all}
Syntax Description
Defaults The MAC-based ACL lookups for all packet types are disabled.
Command Types Switch command.
Command Modes Privileged.
Usage Guidelines The MAC-based ACL lookup feature is available only on a system with a PFC3B or a PFC3BXL. This
feature affects both security ACLs and QoS MAC ACLs.
You should only enable this feature on Layer 2 VLANs. If you want to enab le th is fe at ure o n La ye r 3
VLANs, note the following:
•You will lose some Layer 3 features, as indicated by this message, which appears when you enable
MAC-based ACLs on a Layer 3 VLAN:
Warning: IP RACLs, VACLs & some IP features will be ineffective on these vlans.
•You might see an inconsistency in the egress ACL lookup depending on whether the packet is
forwarded by the software or by the hardware. We recommend that you enable this feature on all
VLANs to eliminate this inconsistency.
Examples This example shows how to enable the MAC-based ACL feat u re on a V L AN:
Console> (enable) set acl mac-packet-classify 5
Enabled mac-packet-classify on vlan(s) 5.
Warning: IP RACLs, VACLs & some IP features will be ineffective on these vlans.
Console> (enable)
Related Commands clear acl mac-packet-classify
show acl mac-packet-classify
vlans VLAN list; valid values are 1 to 4094.
all Specifies all VLANs.