Inserting And Deleting Layer 2 Acl Clauses; Binding A Layer 2 Acl Table To An Interface; Layer 2 Acl Table; Viewing Layer 2 Acls - Dell PowerConnect B-RX Configuration Manual

20

Viewing Layer 2 ACLs

Inserting and deleting Layer 2 ACL clauses

You can make changes to the Layer 2 ACL table definitions without unbinding and rebinding the
table from an interface. For example, you can add a new clause to the ACL table, delete a clause
from the table, delete the ACL table, etc.

Binding a Layer 2 ACL table to an interface

To enable Layer 2 ACL filtering, bind the Layer 2 ACL table to an interface.
NOTE
Layer 2 ACLs cannot be bound to virtual routing interfaces.
Enter a command such as the following at the Interface level of the CLI.
BigIron RX(config)# int e 4/12
BigIron RX(config-int-e100-4/12)# mac access-group 400 in
Syntax: [no] mac access-group <num> in
The <num> parameter specifies the Layer 2 ACL table ID to bind to the interface.
Increasing the maximum number of clauses per

Layer 2 ACL table

You can increase the maximum number of clauses configurable within a Layer 2 ACL table. You
can specify a maximum of 256 clauses per table. The default value is 64 clauses per table.
To increase the maximum number of clauses per Layer 2 ACL table, enter a command such as the
following at the Global CONFIG level of the CLI.
BigIron RX(config)# system-max l2-acl-table-entries 200
Syntax: system-max l2-acl-table-entries <max>
The <max> parameter specifies the maximum number of clauses per Layer 2 ACL. Enter a value
from 64 to 256.
Viewing Layer 2 ACLs
Use the show access-list command to monitor configuration and statistics and to diagnose Layer 2
ACL tables. The following shows an example output.
BigIron RX(config)# show access-list 400
L2 MAC Access List 400:
permit any any 100 etype ipv4
deny any any any etype arp
Syntax: show access-list <number>
The <num> parameter specifies the Layer 2 ACL table ID.
520 BigIron RX Series Configuration Guide
53-1002253-01