Cisco Nexus 7000 Series Command Reference Manual page 599

P Commands
vlan VLAN-ID
time-range time-range-name
Command Default
None
Command Modes
MAC ACL configuration
Command History
Release
4.0(1)
Usage Guidelines
A newly created MAC ACL contains no rules.
If you do not specify a sequence number, the device assigns a sequence number that is 10 greater than the last
rule in the ACL.
When the device applies a MAC ACL to a packet, it evaluates the packet with every rule in the ACL. The
device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more
than one rule are satisfied, the device enforces the rule with the lowest sequence number.
This command does not require a license.
Source and Destination
You can specify the source and destination arguments in one of two ways. In each rule, the method you use
to specify one of these arguments does not affect how you specify the other. When you configure a rule, use
the following methods to specify the source and destination arguments:
• Address and mask—You can use a MAC address followed by a mask to specify a single address or a
MAC-address MAC-mask
The following example specifies the source argument with the MAC address 00c0.4f03.0a72:
switch(config-acl)# permit 00c0.4f03.0a72 0000.0000.0000 any
The following example specifies the destination argument with a MAC address for all hosts with a MAC
vendor code of 00603e:
switch(config-acl)# permit any 0060.3e00.0000 0000.0000.0000
• Any address—You can use the any keyword to specify that a source or destination is any MAC address.
group of addresses. The syntax is as follows:
For examples of the use of the any keyword, see the examples in this section. Each of the examples
shows how to specify a source or destination by using the any keyword.
(Optional) Specifies that the rule matches only packets
with an IEEE 802.1Q header that contains the VLAN
ID given. The VLAN-ID argument can be an integer
from 1 to 4094.
(Optional) Specifies the time range that applies to this
rule. You can configure a time range by using the
time-range command.
Modification
This command was introduced.
Cisco Nexus 7000 Series Security Command Reference
permit (MAC)
573