Configuring A Mac Acl - Dell PowerEdge M420 Configuration Manual

Command
CTRL + Z
show ip access-lists
name
[ ]

Configuring a MAC ACL

Beginning in Privileged EXEC mode, use the following commands to create
an MAC ACL, configure rules for the ACL, and bind the ACL to an interface.
Command
configure
mac access-list extended
name
{deny | permit}
srcmac srcmacmask
{
dstmac
any} {
dstmacmask
| any |
ethertypekey
bpdu } [{
0x0600-0xFFFF
0-4095
eq ] [cos
[secondary-vlan eq
4095
] [secondary-cos
0-7
] [log] [time-range
time-range-name
queue-id
[assign-queue
[{mirror |redirect}
interface
]
564
Configuring Access Control Lists
Purpose
Exit to Privileged EXEC mode.
Display all IPv4 access lists and all of the rules that are
defined for the IPv4 ACL. Use the optional
parameter to identify a specific IPv4 ACL to display.
Purpose
Enter global configuration mode.
Create a named MAC ACL. This command also enters
MAC Access List Configuration mode. If a MAC ACL
with this name already exists, this command enters the
mode to update the existing ACL.
Specify the rules (match conditions) for the MAC access
| list.
srcmac
•
xxxx.xxxx.xxxx.
|
srcmacmask
•
}] [vlan
MAC address in format xxxx.xxxx.xxxx.
0-7
]
0-
• any — Packets sent to or received from any MAC address
dstmac
•
xxxx.xxxx.xxxx.
]
destmacmask
•
]
destination MAC address in format xxxx.xxxx.xxxx.
• bpdu — Bridge protocol data unit
ethertypekey
•
hexadecimal number. (Range: Supported values are
appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast,
mplsucast, Netbios, novell, pppoe, rarp.)
0x0600-0xFFFF
•
(hexadecimal range 0x0600-0xFFFF)
— Valid source MAC address in format
— Valid MAC address bitmask for the source
— Valid destination MAC address in format
— Valid MAC address bitmask for the
— Either a keyword or valid four-digit
— Specify custom EtherType value
name