CLI Reference Guide

270 ACL Commands
mac access-group
Use the mac access-group command in Global Configuration or Interface
Configuration mode to attach a specific MAC Access Control List (ACL) to
an interface.
Syntax
mac access-group name [in | out | control-plane] [ sequence ]
no mac access-group
name
• name — Name of the existing MAC access list. (Range: 1-31 characters)
• [in | out | control-plane]— The packet direction.
in applies the access-list
to ingress packets.
out applies the access-list to egress packets. control-
plane applies the access-list to ingress control plane packets. control-plane
is only valid in Global Configuration mode.
•
sequence — Order of access list relative to other access lists already
assigned to this interface and direction. (Range: 1-4294967295)
Default Configuration
No ACLs are configured by default.
Command Mode
Global Configuration mode or Interface Configuration (Ethernet, VLAN or
Port Channel) mode
User Guidelines
An optional sequence number may be specified to indicate the order of this
access-list relative to the other access-lists already assigned to this interface
and direction. A lower number indicates higher precedence order. If a
sequence number already is in use for this interface and direction, the
specified access-list replaces the currently attached access list using that
sequence number. If the sequence number is not specified for this command,
a sequence number is selected that is one greater than the highest sequence
number currently in use for this interface and direction.
The optional control-plane keyword allows the application of a MAC ACL on
the CPU port.
2CSNXXX_SWUM200.book Page 270 Tuesday, December 10, 2013 1:22 PM