Table 70: Mac Acl Commands - Edge-Core ECS4620-28P Cli Reference Manual

Chapter 10
| Access Control Lists
MAC ACLs
MAC ACLs
access-list mac
permit 2009:DB9:2229:5::/64
Console#
Related Commands
permit, deny (Standard IPv6 ACL) (405)
permit, deny (Extended IPv6 ACL) (406)
ipv6 access-group (Interface Configuration) (408)
The commands in this section configure ACLs based on hardware addresses, packet
format, and Ethernet type. The ACLs can further specify optional IP and IPv6
addresses including protocol type and upper layer ports. To configure MAC ACLs,
first create an access list containing the required permit or deny rules, and then
bind the access list to one or more ports.

Table 70: MAC ACL Commands

Command
access-list mac
mac access-group
permit, deny
mac access-group
show mac access-group
show mac access-list
This command enters MAC ACL configuration mode. Rules can be added to filter
packets matching a specified MAC source or destination address (i.e., physical layer
address), or Ethernet protocol type. Rules can also be used to filter packets based
on IPv4/v6 addresses, including Layer 4 ports and protocol types. Use the no form
to remove the specified ACL.
Syntax
[no] access-list mac acl-name
acl-name – Name of the ACL. (Maximum length: 32 characters,)
Default Setting
None
Command Mode
Global Configuration
Function
Creates a MAC ACL and enters configuration mode
Binds a MAC ACL to all ports for ingress traffic
Filters packets matching a specified source and destination
address, packet format, and Ethernet type. They can be
further specified using optional IP and IPv6 addresses
including protocol type and upper layer ports.
Binds a MAC ACL to a port
Shows port assignments for MAC ACLs
Displays the rules for configured MAC ACLs
– 410 –
Mode
GC
GC
MAC-ACL
IC
PE
PE