Technical data

44 Converged Enhanced Ethernet Command Reference
53-1002508-01
deny (standard ACLs)
2
deny (standard ACLs)
Configures a MAC address rule to drop traffic based on the source MAC address.
Synopsis deny {MAC_ACL | any} [count]
no deny {MAC_ACL | any}
Operands MAC_ACL Specifies the source host MAC address for which to set deny conditions. Use
the format HHHH.HHHH.HHHH.
any Specifies any source MAC address.
count Enables counting of the packets matching the rule.
Defaults By default, no MAC ACLs are configured.
Command
Modes
Feature Access Control List configuration mode
Description Use this command to configure rules to match and to drop traffic based on the source MAC
address. You can also enable counters for a specific rule. There are 255 ACL counters supported
per port group. Use the no deny command to remove a rule from the MAC ACL.
Usage
Guidelines
None
Examples To create a rule in a standard MAC ACL to drop traffic from the source MAC address
0022.3333.4444 and to enable the counting of packets:
switch(conf-macl-std)#deny 0022.3333.4444 count
To delete a rule from a standard MAC ACL:
switch(conf-macl-std)#no deny 0022.3333.4444
See Also mac access-list standard, permit (standard ACLs)