Creating Named Mac Extended Acls - Cisco Catalyst 2960-XR Security Configuration Manual

Creating Named MAC Extended ACLs

Related Topics
IPv4 ACL Interface Considerations, on page 119
Restrictions for Configuring Network Security with ACLs, on page 105
Creating Named MAC Extended ACLs
You can filter non-IPv4 traffic on a VLAN or on a Layer 2 interface by using MAC addresses and named
MAC extended ACLs. The procedure is similar to that of configuring other extended named ACLs.
Beginning in privileged EXEC mode, follow these steps to create a named MAC extended ACL:
SUMMARY STEPS
1. configure terminal
2. mac access-list extended name
3. {deny | permit} {any | host source MAC address | source MAC address mask} {any | host destination
MAC address | destination MAC address mask} [type mask | lsap lsap mask | aarp | amber | dec-spanning
| decnet-iv | diagnostic | dsm | etype-6000 | etype-8042 | lat | lavc-sca | mop-console | mop-dump |
msdos | mumps | netbios | vines-echo | vines-ip | xns-idp | 0-65535] [cos cos]
4. end
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
Switch# configure terminal
Step 2
mac access-list extended name
Example:
Switch(config)# mac access-list extended
mac1
Step 3 {deny | permit} {any | host source MAC address |
source MAC address mask} {any | host destination
MAC address | destination MAC address mask} [type
mask | lsap lsap mask | aarp | amber | dec-spanning MAC address, destination MAC address with a mask, or a specific
| decnet-iv | diagnostic | dsm | etype-6000 |
etype-8042 | lat | lavc-sca | mop-console |
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
132
Purpose
Enters the global configuration mode.
Defines an extended MAC access list using a name.
In extended MAC access-list configuration mode, specifies to permit
or deny any source MAC address, a source MAC address with a
mask, or a specific host source MAC address and any destination
destination MAC address.
(Optional) You can also enter these options:
Configuring IPv4 ACLs
OL-29434-01