Standard Mac Acl Commands; Deny - Dell S6000 Reference Manual

Version 7.5.1.0
pre-Version
6.1.1.0
Usage The ACL hit counters in this command increment the counters for each matching
Information rule, not just the first matching rule.
Example
Dell#show mac accounting access-list mac-ext interface po 1
Extended mac access-list mac-ext on GigabitEthernet 0/11
count (393794576 packets)
count (89076777 packets)
count (0 packets)
count (0 packets)
Extended mac access-list mac-ext on GigabitEthernet 0/12
count (57589834 packets)
count (393143077 packets)
count (0 packets)
count (0 packets)
Dell#

Standard MAC ACL Commands

When you create an access control list without any rule and then apply it to an interface, the ACL
behavior reflects implicit permit. These commands configure standard MAC ACLs.
The S6000 support both Ingress and Egress MAC ACLs.
NOTE: For more information, also refer to the
MAC Access List Commands

deny

To drop packets with a the MAC address specified, configure a filter.
S6000
Syntax
deny {any | mac-source-address [mac-source-address-mask]}
[count [byte]] [log] [monitor]
To remove this filter, you have two choices:
•
Access Control Lists (ACL)
Introduced on the C-Series
Introduced on the E-Series.
seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19
seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29
seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39
seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49
seq 25 permit any any count (0 packets)
seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19
seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29
seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39
seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49
seq 25 permit any any count (0 packets)
sections.
Use the no seq sequence-number command if you know the filter's
sequence number.
Commands Common to all ACL Types and Common
213