Exceeded maximum sequence number.
• If you provide an entry without a sequence number, it is assigned a sequence number that is 10 greater
than the last sequence number in that access list and is placed at the end of the list.
• ACL entries can be added without affecting traffic flow and hardware performance.
• Distributed support is provided so that the sequence numbers of entries in the route-switch processor
(RSP) and interface card are synchronized at all times.
How to Implement Layer 2 Access Lists
Restrictions for Implementing Layer 2 Access Lists
These restrictions apply for implementing Ethernet services access lists:
• Ethernet services access lists are not supported over management interfaces.
• NetIO (software slow path) is not supported for Ethernet services access lists.
• Match on inner VLAN 0 and outer VLAN 0 is not supported on Cisco ASR 9000 High Density 100GE
Ethernet Line Card and ASR 9000 Enhanced Ethernet Line Card.
Configuring Ethernet Services Access Lists
This task configures an Ethernet services access list.
SUMMARY STEPS
1. configure
2. ethernet-service access-list name
3. [ sequence-number ] { permit | deny } { src-mac-address src-mac-mask | any | host } [ { ethertype-number
} | vlan min-vlan-ID [ max-vlan-ID ] ] [ cos cos-value ] [ dei ] [ inner-vlan min-vlan-ID [ max-vlan-ID]
] inner-cos cos-value ] [ inner-dei ]
4. Repeat Step 3 as necessary, adding statements by sequence number where you planned. Use the no
sequence-number command to delete an entry.
5. Use the commit or end command.
DETAILED STEPS
Step 1 configure
Example:
RP/0/RSP0/CPU0:router# configure
Enters the Global Configuration mode.
Step 2 ethernet-service access-list name
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
466
Implementing of Layer 2 Access Lists
How to Implement Layer 2 Access Lists