mac access-group

mac access-group

Syntax

Parameters

Modes

Command History

Related Commands

This command attaches a specific MAC Access Control List (ACL) identified by name to an interface in the ingress direction. This command, when used in Interface Config mode, only affects a single interface, whereas the Global Config mode setting is applied to all interfaces.

mac access-group name [1-4294967295]in

The no mac access-groupname command removes the MAC ACL identified by name from the interface in the ingress direction.

name

The name must be the name of an existing MAC ACL.

 

 

1-4294967295

(OPTIONAL) Enter a sequence number that indicates the order of this

 

ACL relative to other ACLs already assigned to this port channel. A lower

 

sequence number indicates higher precedence order. If the selected

 

number is already in use for this port channel, this ACL replaces the

 

currently attached ACL using that sequence number. If you do not specify

 

a number with this command, a number that is one greater than the

 

highest sequence number currently in use for this port channel is used for

 

this ACL.

 

 

in

The in parameter is required. SFTOS supports only the ingress direction.

 

 

Global Config, Interface Config; Interface Range, which is indicated by the (conf-if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#.

Version 2.3

Added Interface VLAN and Interface Range modes.

 

 

interface range

Defines an interface range and accesses the Interface Range mode

 

 

mac access-group (port

In the Interface Port Channel Config mode, attaches a MAC ACL to

channel)

the selected port channel

mac access-list extended

Creates a MAC Access Control List (ACL) identified by name,

 

consisting of classification fields defined for the Layer 2 header of an

 

Ethernet frame.

 

 

show mac access-lists

Displays the rules defined for the MAC access list specified by name.

 

 

show mac access-lists

 

This command displays the rules defined for all MAC ACLs or that specified by name.

Syntax

show mac access-lists [name]

Mode

Privileged Exec

292

ACL Commands

Page 292
Image 292
Force10 Networks S2410s manual Mac access-group, Show mac access-lists, Name must be the name of an existing MAC ACL