Table of Contents
Advertisement
ACL Commands
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
If ace-priority is omitted, the system sets the rule's priority to the current highest
priority ACE (in the current ACL) + 20. The ACE-priority must be unique per ACL.If
the user types already existed priority, then the command is rejected.
Example
switchxxxxxx(config)# ipv6 access-list server
switchxxxxxx(config-ipv6-al)# deny tcp 3001::2/64 any any 80
2.7
mac access-list
Use the mac access-list Global Configuration mode command to define a Layer 2
access list (ACL) based on source MAC address filtering and to place the device
in MAC Access-list Configuration mode. All commands after this command refer to
this ACL. The rules (ACEs) for this ACL are defined in the
(MAC)
commands. The
interface.
Use the no form of this command to remove the access list.
Syntax
mac access-list extended
no mac access-list extended
Parameters
acl-name—Specifies the name of the MAC ACL (Range: 1–32 characters).
Default Configuration
No MAC access list is defined.
Command Mode
Global Configuration mode
User Guidelines
A MAC ACL is defined by a unique name. IPv4 ACL, IPv6 ACL, MAC ACL or policy
maps cannot have the same name
service-acl input
command is used to attach this ACL to an
acl-name
acl-name
2
permit ( MAC )
and
deny
62
Advertisement
Table of Contents
