Reference Guide

234 | Access Control Lists (ACL)
www.dell.com | support.dell.com
Usage
Information
The ACL hit counters in this command increment the counters for each matching rule, not
just the first matching rule.
Related
Commands
Standard MAC ACL Commands
When an access-list is created without any rule and then applied to an interface, ACL
behavior reflects implicit permit.
c and s platforms support Ingress MAC ACLs only.
The following commands configure standard MAC ACLs:
• deny
• mac access-list standard
• permit
• seq
deny
c e s
Configure a filter to drop packets with a the MAC address specified.
Syntax
deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log] [monitor]
To remove this filter, you have two choices:
• Use the
no seq sequence-number command syntax if you know the filter’s
sequence number or
• Use the
no deny {any | mac-source-address mac-source-address-mask} command.
Parameters
show mac accounting destination Display destination counters for Layer 2 traffic (available
on physical interfaces only).
Note: Refer also to Commands Common to all ACL Types and Common MAC
Access List Commands.
any
Enter the keyword any to specify that all traffic is subject to
the filter.
mac-source-address
Enter a MAC address in nn:nn:nn:nn:nn:nn format.
mac-source-address-mask
(OPTIONAL) Specify which bits in the MAC address must
match. If no mask is specified, a mask of 00:00:00:00:00:00
is applied (in other words, the filter allows only MAC
addresses that match).
count
(OPTIONAL) Enter the keyword count to count packets
processed by the filter.