Filter
Top Products
CLI (Command Line Interface)
218
NXA-ENET24 - Software Management Guide
MAC ACL Commands
MAC ACL Commands
Command Function
access-list mac
This command adds a MAC
access list and enters MAC ACL
configuration mode.
Use the no form to remove the
specified ACL.
Syntax:
[no] access-list mac acl_name
• acl_name – Name of the ACL.
(Maximum length: 16 characters)
Default Setting: None
Command Mode: Global Configuration
Command Usage: When you create a new ACL or enter configuration
mode for an existing ACL, use the permit or deny command to add new
rules to the bottom of the list. To create an ACL, you must add at least one
rule to the list.
To remove a rule, use the no permit or no deny command followed by the
exact text of a previously configured rule.
An ACL can contain up to 32 rules.
Example:
Console(config)#access-list mac jerry
Console(config-mac-acl)#
permit, deny
(MAC ACL)
This command adds a rule to a
MAC ACL. The rule filters packets
matching a specified MAC source
or destination address (i.e., physi-
cal layer address), or Ethernet
protocol type.
Use the no form to remove a rule.
Syntax:
[no] {permit | deny}
{any | host source | source address-bitmask}
{any | host destination | destination address-bitmask}
[vid vid [vid-end]] [ethertype protocol [protocol-end]]
Note: The default is for Ethernet II packets.
• any – Any MAC source or destination address.
• host – A specific MAC address.
• source – Source MAC address.
• destination – Destination MAC address range with bitmask.
• address-bitmask – Bitmask for MAC address (in hexidecimal format). For
all bitmasks, “1” means care and “0” means ignore.
• vid – VLAN ID. (Range: 1-4094)
• vid-end – Upper bound of VID range. (Range: 1-4094)
• protocol – A specific Ethernet protocol number.
(Range: 0-65535)
• protocol-end – Upper bound of protocol range.
(Range: 0-65535)
Default Setting: None
Command Mode: MAC ACL
Command Usage: New rules are added to the end of the list.
The ethertype option can only be used to filter Ethernet II formatted pack-
ets. A detailed listing of Ethernet protocol types can be found in RFC 1060.
A few of the more common types include the following:
• 0800 - IP
• 0806 - ARP
• 8137 - IPX
Example:
This rule permits packets from any source MAC address to the destination
address 00-e0-29-94-34-de where the Ethernet type is 0800:
Console(config-mac-acl)#permit any host 00-e0-29-94-34-de
ethertype 0800
Console(config-mac-acl)#