Quick Reference Guide

ACL Commands | 387
Related
Commands
mac access-group
This command attaches a specific MAC Access Control List (ACL) identified by name to an interface
in the ingress direction. This command, when used in Interface Config mode, only affects a
single interface, whereas the Global Config mode setting is applied to all interfaces
.
Syntax
mac access-group name in [1-4294967295]
The no mac access-group name command removes the MAC ACL identified by name from the
interface in the ingress direction.
Parameters
Modes
Global Config, Interface Config; Interface Range, which is indicated by the (conf-if-range-interface)#
prompt, such as (conf-if-range-vlan 10-20)#.
Command
History
Related
Commands
{deny|permit}
Creates a new rule for the MAC access list selected by the
mac
access-list extended command.
interface range Defines an interface range and accesses the Interface Range mode
mac access-group (port
channel)
In the Interface Port Channel Config mode, attaches a MAC ACL to the
selected port channel
mac access-group
Attaches a specific MAC Access Control List (ACL) identified by
name to
an interface in the ingress direction
mac access-list extended Creates a MAC Access Control List (ACL)
show mac access-lists
Displays the rules defined for the MAC access list specified by
name
name
The name must be the name of an existing MAC ACL.
1-4294967295
(OPTIONAL) Enter a sequence number that indicates the order of this ACL
relative to other ACLs already assigned to this port channel. A lower sequence
number indicates higher precedence order. If the selected number is already in use
for this port channel, this ACL replaces the currently attached ACL using that
sequence number. If you do not specify a number with this command, a number
that is one greater than the highest sequence number currently in use for this port
channel is used for this ACL.
in
This keyword is required. SFTOS supports only the ingress direction.
Version 2.5.1
Modified: Added the sequence option, and removed the
in keyword. All
policies are ingress only.
Version 2.3 Added Interface VLAN and Interface Range modes.
interface range Defines an interface range and accesses the Interface Range mode
mac access-group (port
channel)
In the Interface Port Channel Config mode, attaches a MAC ACL to the
selected port channel
mac access-list extended Creates a MAC Access Control List (ACL) identified by name, consisting of
classification fields defined for the Layer 2 header of an Ethernet frame.
show mac access-lists
Displays the rules defined for the MAC access list specified by
name.