Filter
Top Products
Version Description
7.5.1.0 Introduced on the C-Series.
6.1.1.0 Introduced on the E-Series.
Usage
Information
You can assign one ACL (standard or extended) to an interface.
If you apply a MAC ACL on a VLAN:
• None of the VLAN members can have another ACL applied which has an entry
for the VLAN.
• The VLAN cannot belong to an ACL VLAN group.
If you apply a MAC ACL on a physical or port-channel interface, a VLAN to which
the port is associated cannot have another ACL applied.
If you apply a MAC ACL on an ACL VLAN group, none of the VLANs in the group
can have another ACL applied.
Related
Commands
mac access-list standard — configures a standard MAC ACL.
mac access-list extended — configures an extended MAC ACL.
show mac access-lists
Display all of the Layer 2 ACLs configured in the system, whether or not they are applied to an interface,
and the count of matches/mismatches against each ACL entry displayed.
Z9500
Syntax
show mac access-lists [access-list-name] [interface interface]
[in | out]
Parameters
access-list-
name
Enter the name of a configured MAC ACL, up to 140
characters.
interface
interface
Enter the keyword interface then the one of the following
keywords and slot/port or number information:
• For a Port Channel interface, enter the keyword port-
channel and then enter a number. The C-Series and S-
Series range is from 1 to 128.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet and then enter the slot/port
information.
• For a 40-Gigabit Ethernet interface, enter the keyword
fortyGigE and then enter the slot/port information.
in | out Identify whether ACL is applied on ingress or egress side.
276
Access Control Lists (ACL)