Information About Layer 2 Access Control Lists on EVCs
Creating a Layer 2 ACL
Perform this task to create a Layer 2 ACL with a single ACE.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
mac access-list extended name
4.
permit
{{
src-mac mask
|
any
} {
dest-mac mask
|
any
} [
protocol
[
vlan vlan
] [
cos value
]]}
DETAILED STEPS
Purpose
Command or Action
Enables privileged EXEC mode.
enable
Step 1
Example:
Device> enable
•
Enter your password if prompted.
Enters global configuration mode.
configure terminal
Example:
Device# configure terminal
Step 2
Defines an extended MAC ACL and enters mac access
list control configuration mode.
mac access-list extended name
Example:
Device(config)# mac access-list extended
test-12-acl
Step 3
Allows forwarding of Layer 2 traffic if the conditions
are matched. Creates an ACE for the ACL.
permit
{{
src-mac mask
|
any
} {
dest-mac mask
|
any
}
[
protocol
[
vlan vlan
] [
cos value
]]}
Example:
Device(config-ext-macl)# permit 00aa.00bb.00cc
0.0.0 any
Step 4
Layer 2 Configuration Guide for Cisco NCS 4200 Series
27
Layer 2 Access Control Lists on EVCs
Information About Layer 2 Access Control Lists on EVCs
