Version
Description
7.5.1.0
Introduced on the C-Series.
6.1.1.0
Introduced on the E-Series.
Usage
Information
You can assign one ACL (standard or extended) to an interface.
If you apply a MAC ACL on a VLAN:
• None of the VLAN members can have another ACL applied which has an entry
for the VLAN.
• The VLAN cannot belong to an ACL VLAN group.
If you apply a MAC ACL on a physical or port-channel interface, a VLAN to which
the port is associated cannot have another ACL applied.
If you apply a MAC ACL on an ACL VLAN group, none of the VLANs in the group
can have another ACL applied.
Related
Commands
mac access-list standard
— configures a standard MAC ACL.
mac access-list extended
— configures an extended MAC ACL.
show mac access-lists
Display all of the Layer 2 ACLs configured in the system, whether or not they are applied to an interface,
and the count of matches/mismatches against each ACL entry displayed.
Z9500
Syntax
show mac access-lists [
access-list-name
] [interface
interface
]
[in | out]
Parameters
access-list-
name
Enter the name of a configured MAC ACL, up to 140
characters.
interface
interface
Enter the keyword
interface
then the one of the following
keywords and slot/port or number information:
• For a Port Channel interface, enter the keyword
port-
channel
and then enter a number. The C-Series and S-
Series range is from 1 to 128.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet
and then enter the slot/port
information.
• For a 40-Gigabit Ethernet interface, enter the keyword
fortyGigE
and then enter the slot/port information.
in | out
Identify whether ACL is applied on ingress or egress side.
276
Access Control Lists (ACL)
