Access Control List Commands 4

MAC ACLs

The commands in this section configure ACLs based on hardware addresses, packet format, and Ethernet type. To configure MAC ACLs, first create an access list containing the required permit or deny rules, and then bind the access list to one or more ports

Table 4-35 MAC ACL Commands

Command

Function

Mode

Page

 

 

 

 

access-list mac

Creates a MAC ACL and enters configuration mode

GC

4-95

 

 

 

 

permit, deny

Filters packets matching a specified source and

MAC-ACL

4-96

 

destination address, packet format, and Ethernet type

 

 

show mac access-list

Displays the rules for configured MAC ACLs

PE

4-97

 

 

 

 

mac access-group

Adds a port to a MAC ACL

IC

4-98

 

 

 

 

show mac access-group

Shows port assignments for MAC ACLs

PE

4-98

 

 

 

 

access-list mac

This command adds a MAC access list and enters MAC ACL configuration mode. Use the no form to remove the specified ACL.

Syntax

[no] access-list mac acl_name

acl_name – Name of the ACL. (Maximum length: 16 characters)

Default Setting

None

Command Mode

Global Configuration

Command Usage

When you create a new ACL or enter configuration mode for an existing ACL, use the permit or deny command to add new rules to the bottom of the list. To create an ACL, you must add at least one rule to the list.

To remove a rule, use the no permit or no deny command followed by the exact text of a previously configured rule.

An ACL can contain up to 32 rules.

Example

Console(config)#access-list mac jerry

Console(config-mac-acl)#

Related Commands

permit, deny (4-96)

mac access-group(4-98) show mac access-list(4-97)

4-95

Page 337
Image 337
SMC Networks SMC8150L2 manual MAC ACLs, Access-list mac, MAC ACL Commands Function Mode, Syntax No access-list mac aclname