Cisco Catalyst 4500 Series Command Reference Manual page 450

mac access-list extended
Table 2-10
Protocol Family
Ipx
Ipv6
Rarp-Ipv4
Rarp-Non-Ipv4
Vines
Xns
When you enter the src-mac mask or dest-mac mask value, follow these guidelines:
•
•
•
•
•
•
•
Examples
This example shows how to create a MAC layer access list named mac_layer that denies traffic from
0000.4700.0001, which is going to 0000.4700.0009, and permits all other traffic:
Switch(config)# mac access-list extended mac_layer
Switch(config-ext-macl)# deny 0000.4700.0001 0.0.0 0000.4700.0009 0.0.0 protocol-family
appletalk
Switch(config-ext-macl)# permit any any
Switch(config-ext-macl)# end
Switch#
Related Commands Command
show vlan access-map
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
2-392
Mapping an Ethernet Packet to a Protocol Family
Ethertype in Packet Header
0x8137-0x8138
0x86DD
0x8035 and protocol header of Rarp is Ipv4
0x8035 and protocol header of Rarp is a non-Ipv4 protocol family
0x0BAD, 0x0BAE, 0x0BAF
0x0600, 0x0807
Enter the MAC addresses as three 4-byte values in dotted hexadecimal format such as
0030.9629.9f84.
Enter the MAC address masks as three 4-byte values in dotted hexadecimal format. Use 1 bit as a
wildcard. For example, to match an address exactly, use 0000.0000.0000 (can be entered as 0.0.0).
For the optional protocol parameter, you can enter either the EtherType or the keyword.
Entries without a protocol parameter match any protocol.
The access list entries are scanned in the order that you enter them. The first matching entry is used.
To improve performance, place the most commonly used entries near the beginning of the access list.
An implicit deny any any entry exists at the end of an access list unless you include an explicit
permit any any entry at the end of the list.
All new entries to an existing list are placed at the end of the list. You cannot add entries to the
middle of a list.
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
Description
Displays VLAN access map information.
OL-25342 -01