CLI Reference Guide

ACL Commands 271
This command specified in Interface Configuration mode only affects a
single interface.
Example
This example rate limits multicast traffic ingressing the internal CPU port to
8 kbps and a maximum burst of 4 kilobytes. This affects both unknown
multicast data plane traffic as well as control plane traffic. While this ACL
may be useful in mitigating the effect of unknown multicast traffic on the
switch CPU, use of this rule in the ingress or egress direction is highly likely to
disrupt normal multicast traffic.
11-11(config)# mac access-list extended unkn-multicast
11-11(config-mac-access-list)#permit 01:00:5e:00:00:00 ff:ff:ff:00:00:00 any
rate-limit 8 4
11-11(config-mac-access-list)#permit any any
11-11(config-mac-access-list)#exit
11-11(config)#mac access-group unkn-multicast control-plane
mac access-list extended
Use the mac access-list extended command in Global Configuration mode to
create the MAC Access Control List (ACL) identified by the
name parameter
and enter MAC Access-list Configuration mode.
Syntax
mac access-list extended name
no mac access-list extended name
• name — Name of the access list. (Range: 1-31 characters)
Default Configuration
This command has no default configuration.
Command Mode
Global Configuration mode
2CSNXXX_SWUM200.book Page 271 Tuesday, December 10, 2013 1:22 PM