DGS-6604
m
permit | deny (mac access-list)
CLI Reference Guide
479
Command Mode
MAC access-list extended configuration
Usage Guideline
The time-range profile must be created before it can be specified in the
statement. Otherwise, an error message will be displayed.
Multiple entries can be added to the list; use
permit
for one entry and use
deny
for the other entry.
Different
permit
and
deny
commands can match different fields available for
setting.
The priority can be directly updated by specifying the command with the value for
all other parameters except time-range & priority.
All the configurable arguments (
time-range
and
priority
are excluded) can be
used to differentiate one from another. These arguments are called differentiating
arguments. To remove an entry, using the
no
form of this command, specify the
entry with same value of all differentiating arguments specified (includes all
optional parameters but
time-range
and
priority
are excluded). The
time-range
option in
no
form of this command means to remove the time-range association
from this entry.
To update the time-range or priority, specify the entry with the same value of all
differentiating arguments, which are configured, and the update value for time-
range or priority.
The priority value must be unique in the domain of an access-list. If r a priority
value is entered that is already present, an error message will be shown.
When the time-range is not specified, the statement will be always effective.
Example
This example shows how to configure access entries in the profile daily-profile to
allow two sets of source MAC addresses. Others are denied due to default
implicit deny rule.
Verify the settings by entering the
show access-list
command.
Switch(config)# mac access-list extended daily-profile
Switch(config-mac-ext-acl)# permit 00:80:33:00:00:00 ff:ff:ff:00:00:00 any
Switch(config-mac-ext-acl)#permit 00:f4:57:00:00:00 ff:ff:ff:00:00:00 any
Switch(config-mac-ext-acl)# exit
Switch(config)#
