Cisco Nexus 7000 Series Security Command Reference - Cisco Nexus 7000 Series Command Reference Manual

D Commands
MAC Protocols
The protocol argument can be the MAC protocol number or a keyword. The protocol number is a four-byte
hexadecimal number prefixed with 0x. Valid protocol numbers are from 0x0 to 0xffff. Valid keywords are
the following:
• aarp—Appletalk ARP (0x80f3)
• appletalk—Appletalk (0x809b)
• decnet-iv—DECnet Phase IV (0x6003)
• diagnostic—DEC Diagnostic Protocol (0x6005)
• etype-6000—EtherType 0x6000 (0x6000)
• etype-8042—EtherType 0x8042 (0x8042)
• ip—Internet Protocol v4 (0x0800)
• lat—DEC LAT (0x6004)
• lavc-sca—DEC LAVC, SCA (0x6007)
• mop-console—DEC MOP Remote console (0x6002)
• mop-dump—DEC MOP dump (0x6001)
• vines-echo—VINES Echo (0x0baf)
Examples
This example shows how to configure a MAC ACL named mac-ip-filter with rules that permit any non-IPv4
traffic between two groups of MAC addresses:
switch# configure terminal
switch(config)# mac access-list mac-ip-filter
switch(config-mac-acl)# deny 00c0.4f00.0000 0000.00ff.ffff 0060.3e00.0000 0000.00ff.ffff
ip
switch(config-mac-acl)# permit any any
Related Commands
Command
mac access-list
permit (MAC)
remark
show mac access-list
statistics per-entry
time-range
Description
Configures a MAC ACL.
Configures a deny rule in a MAC ACL.
Configures a remark in an ACL.
Displays all MAC ACLs or one MAC ACL.
Enables collection of statistics for each entry in an
ACL.
Configures a time range.

Cisco Nexus 7000 Series Security Command Reference

deny (MAC)
261