Example of Layer 2 ACL deny by MAC address
In the following example, an ACL is created that denies all traffic from the host with the MAC
address 0012.3456.7890 being sent to the host with the MAC address 0011.2233.4455.
BigIron RX(config)# access-list 401 deny 0012.3456.7890 ffff.ffff.ffff
0011.2233.4455 ffff.ffff.ffff
BigIron RX(config)# access-list 401 permit any any
Using the mask, you can make the access list apply to a range of addresses. For instance if you
changed the mask in the previous example from 0012.3456.7890 to ffff.ffff.fff0, all hosts with
addresses from 0012.3456.7890 to 0012.3456.789f would be blocked. This configuration for this
example is shown in the following.
BigIron RX(config)# access-list 401 deny 0012.3456.7890 ffff.ffff.fffe
0011.2233.4455 ffff.ffff.ffff
BigIron RX(config)# access-list 401 permit any any
BigIron RX Series Configuration Guide
53-1001986-01
Viewing Layer 2 ACLs
20
513