MAC Access Control List (ACL) Commands
8039_en_01
PHOENIX CONTACT
4-7
no mac access-list extended
This command deletes a MAC ACL identified by
<name>
from the system.
mac access-list extended rename
This command changes the name of a MAC Access Control List (ACL). The
<name>
parameter is the name of an existing MAC ACL. The
<newname>
parameter is a case-
sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC access
list.
This command fails if a MAC ACL by the name
<newname>
already exists.
{deny | permit}
This command creates a new rule for the current MAC access list. Each rule is appended to
the list of configured rules for the list.
A rule may either deny or permit traffic according to the specified classification fields. At a
minimum, the source and destination MAC value must be specified, each of which may be
substituted using the keyword any to indicate a match on any value in that field. The
remaining command parameters are all optional, but the most frequently used parameters
appear in the same relative order as shown in the command format.
The Ethertype may be specified as either a keyword or a four-digit hexadecimal value from
0x0600-0xFFFF. The currently supported
<ethertypekey>
values are: appletalk, arp,
Mode
Global Config
Format
no mac access-list extended
<name>
Mode
Global Config
Format
mac access-list extended rename
<name> <newname>
Mode
Global Config
Note:
The 'no' form of this command is not supported, since the rules within a MAC ACL cannot be deleted
individually. Rather, the entire MAC ACL must be deleted and re-specified.
Note:
An implicit 'deny all' MAC rule always terminates the access list.
Note:
For BCM5630x and BCM5650x based systems, assign-queue, redirect, and mirror attributes are
configurable for a deny rule, but they have no operational effect.
RSPSupply - 1-888-532-2706 - www.RSPSupply.com
http://www.RSPSupply.com/p-14161-Phoenix-Contact-2700271-FL-SWITCH-GHS-4G/12-Modular-Ethernet-Switch.aspx