Note
MAC address input
Use "any", if the rule is to apply to all src and/or dest MAC addresses. This corresponds to
the MAC address "00:00:00:00:00:00".
Result
The MAC access control list is configured.
Further notes
You exit the MAC ACL Configuration mode with the
You delete the MAC access control list with the
You display the configuration of the access control list with the
11.3.5.2
deny
Description
With this command, you configure a MAC address control list that describes the MAC
addresses for which incoming and/or outgoing data traffic is locked.
The access control list contains only one entry. If you want to lock or permit further
addresses, create a new access control list.
Note
Processing order of the lists
The access control lists are processed on he interface in the order in which they were
created.
The index number of the access control list is not used for this.
Requirement
You are in the MAC ACL Configuration mode.
The command prompt is as follows:
cli(config-ext-macl)#
Syntax
Call up the command with the following parameters:
deny {any|host<src-mac-address>}{any|host<dest-mac-address>}
SCALANCE XM-400/XR-500 Command Line Interface
Configuration Manual, 05/2014, C79000-G8976-C252-07
Security and authentication
11.3 MAC access control list
command.
exit
no mac access-list extended
show access-lists
command.
command.
493