Force10 Networks S2410s Switch User Manual


 
292 ACL Commands
mac access-group
mac access-group
This command attaches a specific MAC Access Control List (ACL) identified by name to an
interface in the ingress direction. This command, when used in Interface Config mode, only
affects a single interface, whereas the Global Config mode setting is applied to all interfaces.
Syntax
mac access-group name [1-4294967295] in
The no mac access-group name command removes the MAC ACL identified by name
from the interface in the ingress direction.
Parameters
Modes
Global Config, Interface Config; Interface Range, which is indicated by the
(conf-if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#.
Command
History
Related
Commands
show mac access-lists
This command displays the rules defined for all MAC ACLs or that specified by name.
Syntax
show mac access-lists [name]
Mode
Privileged Exec
name
The name must be the name of an existing MAC ACL.
1-4294967295
(OPTIONAL) Enter a sequence number that indicates the order of this
ACL relative to other ACLs already assigned to this port channel. A lower
sequence number indicates higher precedence order. If the selected
number is already in use for this port channel, this ACL replaces the
currently attached ACL using that sequence number. If you do not specify
a number with this command, a number that is one greater than the
highest sequence number currently in use for this port channel is used for
this ACL.
in
The in parameter is required. SFTOS supports only the ingress direction.
Version 2.3 Added Interface VLAN and Interface Range modes.
interface range Defines an interface range and accesses the Interface Range mode
mac access-group (port
channel)
In the Interface Port Channel Config mode, attaches a MAC ACL to
the selected port channel
mac access-list extended Creates a MAC Access Control List (ACL) identified by name,
consisting of classification fields defined for the Layer 2 header of an
Ethernet frame.
show mac access-lists
Displays the rules defined for the MAC access list specified by
name.