Administrator Guide

Example
DellEMC(conf)# mac-access-list access-list extended TestMATExt
DellEMC(config-ext-macl)# remark 5 IPv4
DellEMC(config-ext-macl)# seq 10 permit any any ev2 eq 800 count bytes
DellEMC(config-ext-macl)# remark 15 ARP
DellEMC(config-ext-macl)# seq 20 permit any any ev2 eq 806 count bytes
DellEMC(config-ext-macl)# remark 25 IPv6
DellEMC(config-ext-macl)# seq 30 permit any any ev2 eq 86dd count bytes
DellEMC(config-ext-macl)# seq 40 permit any any count bytes
DellEMC(config-ext-macl)# exit
DellEMC(conf)# do show mac accounting access-list snickers interface tengig
1/17 in
Extended mac access-list snickers on TenGigabitEthernet 1/17
seq 10 permit any any ev2 eq 800 count bytes (559851886 packets 191402152148
bytes)
seq 20 permit any any ev2 eq 806 count bytes (74481486 packets 5031686754
bytes)
seq 30 permit any any ev2 eq 86dd count bytes (7751519 packets 797843521
bytes)
Related
Commands
• mac access-list standard — configure a standard MAC access list.
• show mac accounting access-list — display MAC access list configurations and counters (if configured).
permit
To pass packets matching the criteria specified, configure a filter.
Syntax
permit {any | host mac-address | mac-source-address mac-source-address-mask}
{any | host mac-address | mac-destination-address mac-destination-address-mask}
[ethertype operator] [count [byte]] | [log] [monitor]
To remove this filter, you have two choices:
• Use the no seq sequence-number command if you know the filter’s sequence number.
• Use the no permit {any | host mac-address | mac-source-address mac-source-
address-mask} {any | mac-destination-address mac-destination-address-mask}
command.
Parameters
any Enter the keyword any to forward all packets.
host Enter the keyword host then a MAC address to forward packets with that host address.
mac-source-
address
Enter a MAC address in nn:nn:nn:nn:nn:nn format.
mac-source-
address-mask
(OPTIONAL) Specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries
that do not match and a mask of 00:00:00:00:00:00 only allows entries that match
exactly.
mac-destination-
address
Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format.
mac-destination-
address-mask
Specify which bits in the MAC address must be matched.
The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries
that do not match and a mask of 00:00:00:00:00:00 only allows entries that match
exactly.
ethertype
operator
(OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes:
• ev2 - is the Ethernet II frame format
• llc - is the IEEE 802.3 frame format
• snap - is the IEEE 802.3 SNAP frame format
count (OPTIONAL) Enter the keyword count to count packets the filter processes.
Access Control Lists (ACL) 231