2-635
Catalyst 6500 Series Switch Command Reference—Release8.4
OL-6244-01
Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands set security acl mac
set security acl mac
To create a new entry in a non-IP or non-IPX protocol VACL and to append the new entry at the end of
the VACL, use the set security acl mac command.
set security acl mac {acl_name} {permit | deny} {src_mac_addr_spec}
{dest_mac_addr_spec} [ethertype] [cos cos_value] [vlan vlan] [capture]
[before editbuffer_index | modify editbuffer_index]
Syntax Description
Defaults There are no default ACLs and no default ACL-VLAN m appi ng s.
Command Types Switch command.
Command Modes Privileged.
Usage Guidelines Configurations you make by entering this command are saved to NVRAM and har dwa re only after you
enter the commit command. Enter ACEs in batches, and then enter the commit command to save all of
them in NVRAM and in the hardware.
If you use the capture keyword, the ports that capture the traffic and transmit out are specified by
entering the set security acl capture- po rts co mmand .
When you enter the ACL name, follow these naming conventions:
•Maximum of 32 characters long and may include a-z, A-Z, 0-9, the d ash character (-), the unde rscore
character (_), and the period character (.)
acl_name Unique name that identifies the list to which the entry belongs.
permit Allows traffic from the specified source MAC address.
deny Blocks traffic from the specified source MAC address.
src_mac_addr_spec Source MAC address and mask in the form
source_mac_addresssou rce_mac_address_mask.
dest_mac_addr_spec Destination MAC address and mask.
ethertype (Optional) Number or name that matches the Ethertype for
Ethernet-encapsulated packets; valid values are 0x0600, 0x0601, 0x0BAD,
0x0BAF, 0x6000-0x6009, 0x8038-0x8042, 0x809b, and 0x80f3. See the
“Usage Guidelines” section for a list of valid names.
cos cos_value (Optional) Specifies the CoS value; valid values are from 0 to 7.
vlan vlan (Optional) Specifies a VLAN; valid values are from 1 to 4094.
capture (Optional) Specifies packets are switched normally and captured.
before editbuffer_index (Optional) Inserts the new ACE in front of another ACE.
modify
editbuffer_index (Optional) Replaces an ACE with the new ACE.