Dell C9000 series, Справочное руководство

Страница: 334 / 2286

Version Description
7.8.1.0 Increased the name string to accept up to 140 characters. Prior
to 7.8.1.0, names are up to 16 characters long.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series
6.1.1.0 Introduced on the E-Series.
Usage Information Displays occur only if the access-list is attached to an interface.
If no access-list is attached to the interface, no information displays and you are
returned to the DELL# prompt.
Example
show mac accounting access-list
mac access-list standard mac
seq 5 permit 11:22:33:44:55:66 count
seq 10 deny any log threshold-in-msgs 10 interval 5 order 1
seq 15 permit any order 2 monitor
!
Standard MAC ACL Commands
The following commands configure standard MAC ACLs. The C9000 supports both Ingress and Egress MAC
ACLs.
When you create an access control list without any rule and then apply it to an interface, the ACL behavior
reflects implicit permit.
NOTE: For more information, also refer to the Commands Common to all ACL Types and
Common MAC Access List Commands sections.
deny
To drop packets with a matching MAC address, configure a filter.
C9000 Series
Syntax
deny {any | mac-source-address [ mac-source-address-mask ]} [count
[byte]] [log [interval minutes ] [threshold-in-msgs [ count ]]
[monitor]
To remove this filter, you have two choices:
• Use the
no seq sequence-number
command if you know the filter’s sequence
number.
Access Control Lists (ACL) 334