Cisco Catalyst 2960-X Security Configuration Manual page 193

Configuring IPv4 ACLs
SUMMARY STEPS
1. enable
2. configure terminal
3. mac access-list extended name
4. {deny | permit} {any | host source MAC address | source MAC address mask} {any | host destination
MAC address | destination MAC address mask} [type mask | lsap lsap mask | aarp | amber | dec-spanning
| decnet-iv | diagnostic | dsm | etype-6000 | etype-8042 | lat | lavc-sca | mop-console | mop-dump |
msdos | mumps | netbios | vines-echo | vines-ip | xns-idp | 0-65535] [cos cos]
5. end
6. show running-config
7. copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 enable
Example:
Switch> enable
Step 2 configure terminal
Example:
Switch# configure terminal
Step 3 mac access-list extended name
Example:
Switch(config)# mac access-list extended mac1
Step 4 {deny | permit} {any | host source MAC address |
source MAC address mask} {any | host destination
MAC address | destination MAC address mask} [type
mask | lsap lsap mask | aarp | amber | dec-spanning
| decnet-iv | diagnostic | dsm | etype-6000 |
etype-8042 | lat | lavc-sca | mop-console |
mop-dump | msdos | mumps | netbios | vines-echo
| vines-ip | xns-idp | 0-65535] [cos cos]
Example:
Switch(config-ext-macl)# deny any any
OL-29048-01
Purpose
Enables privileged EXEC mode. Enter your password if prompted.
Enters the global configuration mode.
Defines an extended MAC access list using a name.
In extended MAC access-list configuration mode, specifies to
permit or deny any source MAC address, a source MAC address
with a mask, or a specific host source MAC address and any
destination MAC address, destination MAC address with a mask,
or a specific destination MAC address.
(Optional) You can also enter these options:
• type mask—An arbitrary EtherType number of a packet with
Ethernet II or SNAP encapsulation in decimal, hexadecimal,
or octal with optional mask of don't care bits applied to the
EtherType before testing for a match.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
Creating Named MAC Extended ACLs
169