Consolidated Platform Configuration Guide, Cisco Ios Release 15.2(4)E (Catalyst 2960-X Switches - Cisco Catalyst 2960 series Configuration Manual

DETAILED STEPS
Command or Action
Step 1
enable
Example:
Switch> enable
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3 mac access-list extended name
Example:
Switch(config)# mac access-list extended mac1
Step 4 {deny | permit} {any | host source MAC address |
source MAC address mask} {any | host destination
MAC address | destination MAC address mask} [type
mask | lsap lsap mask | aarp | amber | dec-spanning
| decnet-iv | diagnostic | dsm | etype-6000 |
etype-8042 | lat | lavc-sca | mop-console |
mop-dump | msdos | mumps | netbios | vines-echo
| vines-ip | xns-idp | 0-65535] [cos cos]
Example:
Switch(config-ext-macl)# deny any any
decnet-iv
or
Switch(config-ext-macl)# permit any any
Step 5
end
Example:
Switch(config-ext-macl)# end
Purpose
Enables privileged EXEC mode. Enter your password if prompted.
Enters the global configuration mode.
Defines an extended MAC access list using a name.
In extended MAC access-list configuration mode, specifies to
permit or deny any source MAC address, a source MAC address
with a mask, or a specific host source MAC address and any
destination MAC address, destination MAC address with a mask,
or a specific destination MAC address.
(Optional) You can also enter these options:
Returns to privileged EXEC mode.

Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)

How to Configure VLAN Access Control Lists
• type mask—An arbitrary EtherType number of a packet with
Ethernet II or SNAP encapsulation in decimal, hexadecimal,
or octal with optional mask of don't care bits applied to the
EtherType before testing for a match.
• lsap lsap mask—An LSAP number of a packet with
IEEE 802.2 encapsulation in decimal, hexadecimal, or octal
with optional mask of don't care bits.
• aarp | amber | dec-spanning | decnet-iv | diagnostic | dsm
| etype-6000 | etype-8042 | lat | lavc-sca | mop-console |
mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp—A non-IP protocol.
• cos cos—An IEEE 802.1Q cost of service number from 0 to
7 used to set priority.
1249