Changing A Mac Acl - Cisco Nexus 9000 Series Configuration Manual

Changing a MAC ACL

Changing a MAC ACL
You can remove a MAC ACL from the device.
Before you begin
Use the show mac access-lists command with the summary keyword to find the interfaces on which a MAC
ACL is configured.
SUMMARY STEPS
1. configure terminal
2. mac access-list name
3. (Optional) [sequence-number] {permit | deny} source destination-protocol
4. (Optional) no {sequence-number | {permit | deny} source destination-protocol}
5. (Optional) [no] statistics per-entry
6. (Optional) show mac access-lists name
7. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2
mac access-list name
Example:
switch(config)# mac access-list acl-mac-01
switch(config-mac-acl)#
Step 3 (Optional) [sequence-number] {permit | deny} source
destination-protocol
Example:
switch(config-mac-acl)# 100 permit mac
00c0.4f00.0000 0000.00ff.ffff any 0x0806
Step 4 (Optional) no {sequence-number | {permit | deny} source
destination-protocol}
Example:
switch(config-mac-acl)# no 80
Step 5 (Optional) [no] statistics per-entry
Example:
switch(config-mac-acl)# statistics per-entry
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
288
Purpose
Enters global configuration mode.
Enters ACL configuration mode for the ACL that you
specify by name.
Creates a rule in the MAC ACL. Using a sequence number
allows you to specify a position for the rule in the ACL.
Without a sequence number, the rule is added to the end of
the rules.
The permit and deny commands support many ways of
identifying traffic.
Removes the rule that you specify from the MAC ACL.
The permit and deny commands support many ways of
identifying traffic.
Specifies that the device maintains global statistics for
packets that match the rules in the ACL.
The no option stops the device from maintaining global
statistics for the ACL.
Configuring MAC ACLs