Users Guide

Version Description
7.5.1.0 Introduced on the C-Series.
6.1.1.0 Introduced on the E-Series.
mac access-group
Apply a MAC ACL to traffic entering or exiting an interface. You can apply a MAC ACL on a physical, port-
channel, or VLAN interface.
Syntax
mac access-group access-list-name {in [vlan vlan-range] | out}
To delete a MAC access-group, use the no mac access-group mac-list-name
command.
Parameters
access-list-name Enter the name of a configured MAC access list, up to 140
characters.
NOTE: This option is available only with the keyword in
option.
vlan vlan-range (OPTIONAL) Enter the keyword vlan and then enter a range of
VLANs. The range is from 1 to 4094 (you can use IDs 1 to 4094).
NOTE: This option is available only with the keyword in
option.
optimized Enter the keyword optimized to enable ACL optimization.
in Enter the keyword in to configure the ACL to filter incoming
traffic.
out Enter the keyword out to configure the ACL to filter outgoing
traffic.
NOTE:
1. If the MAC ACL is applied on VLAN, none of the VLAN members should have an
access list applied for that VLAN.
2. If the MAC ACL is applied on a Physical or Port Channel interface, the VLAN in
which this port is associated should not have an access list applied.
3. If the MAC ACL is applied on a VLAN, then that VLAN should not belong to
VLAN ACL group.
4. If the MAC ACL is applied on a VLAN ACL group, then none of the VLANs in
that group should have an access list applied on it.
Defaults none
Access Control Lists (ACL) 280