Chapter 25: Access Control Lists
MAC ACLs
– 911 –
S
YNTAX
mac access-group acl-name in
[
time-range
time-range-name
] [
counter
]
no
mac access-group acl-name in
acl-name
– Name of the ACL. (Maximum length: 32 characters)
in
– Indicates that this list applies to ingress packets.
time-range-name
- Name of the time range. (Range: 1-16
characters)
counter
– Enables counter for ACL statistics.
D
EFAULT
S
ETTING
None
C
OMMAND
M
ODE
Global Configuration
C
OMMAND
U
SAGE
If an ACL is already bound to a port and you bind a different ACL to it, the
switch will replace the old binding with the new one.
E
XAMPLE
Console(config)#mac access-group jerry in
Console(config)#
R
ELATED
C
OMMANDS
permit
,
deny
(MAC ACL)
This command adds a rule to a MAC ACL. The rule filters packets matching
a specified MAC source or destination address (i.e., physical layer address),
or Ethernet protocol type. Use the
no
form to remove a rule.
S
YNTAX
{
permit
|
deny
}
{
any
|
host source
|
source address-bitmask
}
{
any
|
host destination
|
destination address-bitmask
}
[
cos
cos
cos-bitmask
] [
vid
vid vid-bitmask
]
[
ethertype
protocol
[
protocol
-
bitmask
]]
{{
ip
{
any
|
host source-ip
|
source-ip network-mask
}
{
any
|
host destination-ip
|
destination-ip network-mask
}
{
ipv6
{
any
|
host source-ipv6
|
source-ipv6/prefix-length
}
{
any
|
host destination-ipv6
|
destination-ipv6/prefix-length
}}
[
protocol
protocol
]
[
l4-source-port
sport
[
port-bitmask
]]
[
l4-destination-port
dport
[
port-bitmask
]}]
[
time-range
time-range-name
]
Summary of Contents for SSE-G2252
Page 42: ...44 General IP Routing on page 627...
Page 603: ...Chapter 16 IP Configuration Setting the Switch s IP Address IP Version 6 609...
Page 883: ...Chapter 24 General Security Measures Port based Traffic Segmentation 894...
Page 989: ...Chapter 30 Congestion Control Commands Automatic Traffic Control Commands 1000 Console...
Page 1007: ...Chapter 33 Address Table Commands 1019...
Page 1137: ...Chapter 38 Quality of Service Commands 1150...
