Mac Access-Group - Cisco Catalyst 2950 Command Reference Manual

Chapter 2 Cisco IOS Commands

mac access-group

Use the mac access-group interface configuration command to apply a named extended MAC access
control list (ACL) to an interface. Use the no form of this command to remove a MAC ACL from an
interface.
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
name
Defaults
No MAC ACL is applied to the interface.
Command Modes
Interface configuration
Command History Release
12.1(6)EA2
Usage Guidelines
You can apply MAC ACLs only to ingress interfaces. If an IP access group is already defined for an
interface, you cannot apply this command to the interface.
After receiving the packet, the switch checks the match conditions in the ACL. If the conditions are
matched, the switch forwards the packet.
If the specified ACL does not exist, the switch forwards all packets.
For more information about configuring MAC extended ACLs, refer to the "Configuring Network
Note
Security with ACLs" chapter in the Catalyst 2950 Desktop Switch Software Configuration Guide for this
release.
Examples
This example shows how to apply a MAC extended ACL named macacl2 to an interface:
Switch(config)# interface fastethernet0/1
Switch(config-if)# mac access-group macacl2 in
You can verify your settings by entering the show mac access-group privileged EXEC command.
78-11381-05
mac access-group name in
no mac access-group name in
Name of the MAC extended ACL.
Modification
This command was first introduced.
Catalyst 2950 Desktop Switch Command Reference
mac access-group
2-81