2-145
Cisco ME 3800X and ME 3600X Switch Command Reference
OL-28238-01
Chapter 2 Cisco ME 3800X and ME 3600X Switch Cisco IOS Commands
mac access-group
mac access-group
To apply a MAC access control list (ACL) to a Layer 2 interface, use the
mac access-group
command
in interface configuration mode. To remove all MAC ACLs or the specified MAC ACL from the
interface, use the
no
form of this command. You create the MAC ACL by using the
mac access-list
extended
global configuration command.
mac access-group
{
name
}
in
no mac access-group
{
name
}
Note
You cannot attach an ACL to a Layer 2 port that has an Ethernet flow point (EFP) service instance
configured on it. The
mac access-group
command is rejected on these ports.
Syntax Description
Defaults
No MAC ACL is applied to the interface.
Command Modes
Interface configuration (Layer 2 interfaces only)
Command History
Usage Guidelines
You can apply MAC ACLs only to ingress Layer 2 interfaces. You cannot apply MAC ACLs to Layer 3
interfaces or to Layer 2 interfaces that have service instances configured on them.
On Layer 2 interfaces, you can filter IP traffic by using IP access lists and non-IP traffic by using MAC
access lists. You can filter both IP and non-IP traffic on the same Layer 2 interface by applying both an
IP ACL and a MAC ACL to the interface. You can apply no more than one IP access list and one MAC
access list to the same Layer 2 interface.
If a MAC ACL is already configured on a Layer 2 interface and you apply a new MAC ACL to the
interface, the new ACL replaces the previously configured one.
If you apply an ACL to a Layer 2 interface on a switch, and the switch has an input Layer 3 ACL or a
VLAN map applied to a VLAN that the interface is a member of, the ACL applied to the Layer 2
interface takes precedence.
When an inbound packet is received on an interface with a MAC ACL applied, the switch checks the
match conditions in the ACL. If the conditions are matched, the switch forwards or drops the packet,
according to the ACL.
If the specified ACL does not exist, the switch forwards all packets.
name
Specifies a named MAC access list.
in
Specifies that the ACL is applied in the ingress direction. Outbound ACLs are not
supported on Layer 2 interfaces.
Release
Modification
12.2(52)EY
This command was introduced.
Содержание ME 3600X
Страница 14: ...Contents xiv Cisco ME 3800X and ME 3600X Switch Command Reference OL 28238 01 ...
Страница 534: ... 100 Cisco ME 3800X and ME 3600X Switch Command Reference OL 28238 01 Chapter xconnect ...
Страница 625: ...Index IN 15 Cisco ME 3800X and ME 3600X Switch Command Reference OL 28238 01 ...
Страница 626: ...Index IN 16 Cisco ME 3800X and ME 3600X Switch Command Reference OL 28238 01 ...
Страница 627: ...Index IN 17 Cisco ME 3800X and ME 3600X Switch Command Reference OL 28238 01 ...
Страница 628: ...Index IN 18 Cisco ME 3800X and ME 3600X Switch Command Reference OL 28238 01 ...