DGS-6604
m
mac access-group
CLI Reference Guide
413
M
mac access-group
Use the
mac access-group
command to specify a MAC access list to be applied
to an interface. Use the
no mac access-group
command to remove the access
group control from the interface.
mac access-group
NAME
[in]
no mac access-group
NAME
[in]
Default
If the
in
direction is not specified, the default will be the
in
direction.
Command Mode
Interface configuration
Usage Guideline
Only one MAC access list can be applied to the same interface.
An error
message is sent if an attempt is made to apply a second MAC access list and the
attempt is ignored.
The MAC access list must first be created using the
mac access-list
command
before it can be applied to interface. Otherwise, an error message will be
displayed.
The keyword
in
specifies the ingress direction check.
One MAC access-list, one IP access-list and one IPv6 access-list can be applied
to the same interface.
The association of an access-group with an interface will consume the filtering
entry resource in the switch controller. If the command is applied successfully,
the number of remaining max entries will be displayed. If the resource is
insufficient to commit the command, an error message will be displayed.
Example
This example shows applied MAC access-list “daily-profile” to eth3.1
Verify the settings with the
show access-group
command.
Syntax Description
NAME
The name of the MAC access list to be applied. Up to 32 characters are allowed.
The syntax is a general string that does not allow spaces.
in
Specifies that the MAC access list will be applied in the ingress direction.
Switch(config)# interface eth3.1
Switch(config-if)# mac access-group daily-profile in
Summary of Contents for DGS-6600-48TS
Page 1: ...0 9 3...