- 393 -
Default Setting
None
Command Mode
Global Config
7.22.2.3 mac access-group in
This command attaches a specific MAC Access Control List (ACL) identified by <name> to an
interface, or associates it wi th a VLAN ID, in a given direction. Th e <name> parameter must b e the name
of an exsiting MAC ACL.
An optional sequence number may be specified to indicate the order of this access list relative to other
access lists already assigned to this interface and di rection. A lower number indicates higher precedence
order. If a sequence number is al ready in use for this interface and direction, the specified access list
replaces the currently attached access list using that sequence number. If the sequence num ber is not
specified for this command, a seque nce number that is one greater than the highest se quence number
currently in use for this interface and direction will be used.
This command specified in 'Interface Config' mode only affects a single interface, whereas the 'Global
Config' mode setting is applied to all interfaces. The 'Interface Config' mode command is only available on
platforms that support independent per-port class of service queue configuratio n. The VLAN keyword is
only valid in the 'Global Config' mode.
Syntax
mac access-group <name > [vlan <vlan-id>] in [<1-4294967295>]
no mac access-grou p <name> [vlan <vlan-id>] in
<no> - This command re moves a MAC ACL identified by <name> from the inte rface or vlan in a given
direction.
Default Setting
None
Command Mode
Global Config
Interface Config
7.22.2.4 mac access-list
This command creates a new rule for the current MAC access list. Each rule is appended to the list of
configured rules for the list. Note that an implicit 'deny all' MAC rule always terminates the access list.
Note: The 'no' form of this command is not sup ported, as the rules within an ACL cannot be deleted
individually. Rather, the entire ACL must be deleted and re-specified.