Filter
Top Products
Quality of Service (QoS) Commands
476
ProSafe M4100 and M7100 Managed Switches
mac access-group
This command either attaches a specific MAC access control list (ACL) identified by <name>
to an interface, or associates it with a VLAN ID, in a given direction. The <name> parameter
must be the name of an existing MAC ACL.
An optional sequence number might be specified to indicate the order of this mac access list
relative to other mac access lists already assigned to this interface and direction. A lower
number indicates higher precedence order. If a sequence number is already in use for this
interface and direction, the specified mac access list replaces the currently attached mac
access list using that sequence number. If the sequence number is not specified for this
command, a sequence number that is one greater than the highest sequence number
currently in use for this interface and direction is used.
This command specified in Interface Config mode only affects a single interface, whereas the
Global Config mode setting is applied to all interfaces. The VLAN keyword is only valid in the
Global Config mode. The Interface Config mode command is available only on platforms that
support independent per-port Class of Service queue configuration.
An optional control-plane is specified to apply the MAC ACL on the CPU port. The control
packets, like BPDU, are also dropped because of the implicit deny all rule added to the end of
the list. To overcome this, permit rules must be added to allow the control packets.
Note: The <out> option might or might not be available, depending on the
platform.
The control-plane keyword is available only in Global Config mode.
Format {deny|permit} {<srcmac> | any} {<dstmac> | any} [<ethertypekey> |
<0x0600-0xFFFF>] [vlan {eq <0-4095>}] [cos <0-7>] [[log] [time-range
<time-range-name>][assign-queue <queue-id>]] [{mirror | redirect}
<slot/port>]
Mode
Mac-Access-List Config
Format mac access-group <name> {{control-plane|in|out} vlan vlan-id
{in|out}} [sequence <1-4294967295>]
Modes
• Global Config
• Interface Config