Creating Named Mac Extended Acls - Cisco ME 3400G-2CS - Ethernet Access Switch Software Configuration Manual

Ethernet access switch

Hide thumbs Also See for ME 3400G-2CS - Ethernet Access Switch:

Table of Contents

Creating Named MAC Extended ACLs

This is a an example of a log for an extended ACL:

01:24:23:%SEC-6-IPACCESSLOGDP:list ext1 permitted icmp 10.1.1.15 -> 10.1.1.61 (0/0), 1

01:25:14:%SEC-6-IPACCESSLOGDP:list ext1 permitted icmp 10.1.1.15 -> 10.1.1.61 (0/0), 7

01:26:12:%SEC-6-IPACCESSLOGP:list ext1 denied udp 0.0.0.0(0) -> 255.255.255.255(0), 1

01:31:33:%SEC-6-IPACCESSLOGP:list ext1 denied udp 0.0.0.0(0) -> 255.255.255.255(0), 8

Note that all logging entries for IP ACLs start with

depending on the kind of ACL and the access entry that has been matched.

This is an example of an output message when the log-input keyword is entered:

00:04:21:%SEC-6-IPACCESSLOGDP:list inputlog permitted icmp 10.1.1.10 (Vlan1

0001.42ef.a400) -> 10.1.1.61 (0/0), 1 packet

A log message for the same sort of packet using the log keyword does not include the input interface

information:

00:05:47:%SEC-6-IPACCESSLOGDP:list inputlog permitted icmp 10.1.1.10 -> 10.1.1.61 (0/0), 1

Creating Named MAC Extended ACLs

You can filter non-IPv4 traffic on a VLAN or on a Layer 2 interface by using MAC addresses and named

MAC extended ACLs. The procedure is similar to that of configuring other extended named ACLs.

You cannot apply named MAC extended ACLs to Layer 3 interfaces.

For more information about the supported non-IP protocols in the mac access-list extended command,

see the command reference for this release.

Though visible in the command-line help strings, appletalk is not supported as a matching condition for

the deny and permit MAC access-list configuration mode commands.

Beginning in privileged EXEC mode, follow these steps to create a named MAC extended ACL:

configure terminal

mac access-list extended name

Cisco ME 3400 Ethernet Access Switch Software Configuration Guide

%SEC-6-IPACCESSLOG

Enter global configuration mode.

Define an extended MAC access list using a name.

Configuring Network Security with ACLs

with minor variations in format

Show Quick Links

Table of Contents