Administrator Guide

Table Of Contents
If you configure the sequence-number, the sequence-number is used as a tie breaker for rules with
the same order.
NOTE: When you configure ACL logging and byte counters simultaneously, byte counters may display
an incorrect value. Configure packet counters with logging instead.
Related
Commands
deny configures a filter to drop packets.
permit configures a filter to forward packets.
Common MAC Access List Commands
The following commands are available within both MAC ACL modes (Standard and Extended) and do not have mode-specific
options. These commands allow you to clear, display, and assign MAC ACL configurations.
The Z9000 supports both Ingress and Egress MAC ACLs.
The MAC ACL can be applied on Physical, Port-channel and VLAN interfaces. As per the specified rules in the acl, the traffic on
the interface/ VLAN members or Port-channel members will be permitted or denied.
clear counters mac access-group
Clear counters for all or a specific MAC ACL.
Syntax
clear counters mac access-group [mac-list-name]
Parameters
mac-list-name
(OPTIONAL) Enter the name of a configured MAC access list.
Command Modes EXEC Privilege
Command
History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell
Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version Description
9.7(0.0) Introduced on the S6000ON.
9.0.2.0 Introduced on the S6000.
8.3.19.0 Introduced on the S4820T.
8.3.11.1 Introduced on the Z9000.
8.3.7.0 Introduced on the S4810.
8.1.1.0 Introduced on the E-Series ExaScale.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series.
6.1.1.0 Introduced on the E-Series.
mac access-group
Apply a MAC ACL to traffic entering or exiting an interface. The following interface types can be used for VLAN , Physical
interface, Port channel interface. Enter into the interface mode and apply the mac acl in the following manner.
Syntax
Applying MAC Access group on a physical / port channel interfacemac access-group access-
list-name {in [vlan vlan-range] | out}
To delete a MAC access-group, use the no mac access-group mac-list-name command.
Access Control Lists (ACL) 175