Users Guide

Version Description
7.4.1.0 Added support for the non-contiguous mask and added the monitor option.
Deprecated the keyword established.
6.5.10 Expanded to include the optional QoS order priority for the ACL entry.
Usage Information
The monitor option is relevant in the context of ow-based monitoring only. For more information, refer to
Port Monitoring.
The order option is relevant in the context of the Policy QoS feature only. The following applies:
• The seq sequence-number command is applicable only in an ACL group.
• The order option works across ACL groups that are applied on an interface via the QoS policy
framework.
• The order option takes precedence over seq sequence-number.
• If you do not congure sequence-number, the rules with the same order value are ordered according
to their conguration order.
• If you congure sequence-number, the sequence-number is used as a tie breaker for rules with the
same order.
When you use the log option, the CP processor logs details about the packets that match. Depending on
how many packets match the log entry and at what rate, the CP may become busy as it has to log these
packets’ details.
If you congure the sequence-number, the sequence-number is used as a tie breaker for rules with
the same order.
NOTE: When you congure ACL logging and byte counters simultaneously, byte counters may
display an incorrect value. Congure packet counters with logging instead.
Related Commands
deny — congures a lter to drop packets.
permit — congures a lter to forward packets.
Common MAC Access List Commands
The following commands are available within both MAC ACL modes (Standard and Extended) and do not have mode-specic
options. These commands allow you to clear, display, and assign MAC ACL congurations.
The platform supports both Ingress and Egress MAC ACLs.
The MAC ACL can be applied on Physical, Port-channel and VLAN interfaces. As per the specied rules in the ACL, the trac on the
interface/ VLAN members or Port-channel members will be permitted or denied.
clear counters mac access-group
Clear counters for all or a specic MAC ACL.
Syntax
clear counters mac access-group [mac-list-name]
Parameters
mac-list-name (OPTIONAL) Enter the name of a congured MAC access list.
230
Access Control Lists (ACL)