2-185
Catalyst 2950 and Catalyst 2955 Switch Command Reference
OL-10102-01
Chapter 2 Catalyst 2950 and 2955 Cisco IOS Commands
mac access-group
mac access-group
Use the mac access-group interface configuration command to apply a named extended MAC access
control list (ACL) to an interface. Use the no form of this command to remove a MAC ACL from an
interface.
mac access-group name in
no mac access-group name in
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Defaults No MAC ACL is applied to the interface.
Command Modes Interface configuration
Command History
Usage Guidelines You can apply MAC ACLs only to ingress interfaces. If an IP access group is already defined for an
interface, you cannot apply this command to the interface.
After receiving the packet, the switch checks the match conditions in the ACL. If the conditions are
matched, the switch forwards the packet.
If the specified ACL does not exist, the switch forwards all packets.
Note For more information about configuring MAC extended ACLs, see the “Configuring Network Security
with ACLs” chapter in the software configuration guide for this release.
Examples This example shows how to apply a MAC extended ACL named macacl2 to an interface:
Switch(config)# interface fastethernet0/1
Switch(config-if)# mac access-group macacl2 in
You can verify your settings by entering the show mac access-group privileged EXEC command.
name Name of the MAC extended ACL.
Release Modification
12.1(6)EA2 This command was introduced.
To Next Page
Loading...
Need help?
General
