Changing A Mac Acl - Cisco Nexus 5000 Series Configuration Manual

Configuring MAC ACLs
SUMMARY STEPS
1. switch# configure terminal
2. switch# mac access-list name
3. switch(config-mac-acl)# [sequence-number] {permit | deny} source destination protocol
4. (Optional) switch(config-mac-acl)# statistics
5. (Optional) switch# show mac access-lists name
6. (Optional) switch# copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 switch# configure terminal
Step 2 switch# mac access-list name
Step 3 switch(config-mac-acl)# [sequence-number]
{permit | deny} source destination protocol
Step 4
switch(config-mac-acl)# statistics
Step 5
switch# show mac access-lists name
Step 6 switch# copy running-config startup-config
The following example shows how to create a MAC ACL and add rules to it:
switch# configure terminal
switch(config)# mac access-list acl-mac-01
switch(config-mac-acl)# permit 00c0.4f00.0000 0000.00ff.ffff any
switch(config-mac-acl)# statistics

Changing a MAC ACL

In an existing MAC ACL, you can add and remove rules. You cannot change existing rules. Instead, to change
a rule, you can remove it and recreate it with the desired changes.
If you need to add more rules between existing rules than the current sequence numbering allows, you can
use the resequence command to reassign sequence numbers.
To change a MAC ACL, perform this task:
Cisco Nexus 5000 Series NX-OS Security Configuration Guide
84
Purpose
Enters configuration mode.
Creates the MAC ACL and enters ACL configuration mode.
Creates a rule in the MAC ACL.
The permit and deny options support many ways of identifying
traffic. For more information, see the Cisco Nexus 5000 Series
Command Reference.
(Optional)
Specifies that the switch maintains global statistics for packets
matching the rules in the ACL.
(Optional)
Displays the MAC ACL configuration.
(Optional)
Copies the running configuration to the startup configuration.
Changing a MAC ACL
OL-20919-01