2-412
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
OL-27596 -01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
mac access-list extended
When you enter the src-mac mask or dest-mac mask value, follow these guidelines:
• Enter the MAC addresses as three 4-byte values in dotted hexadecimal format such as
0030.9629.9f84.
• Enter the MAC address masks as three 4-byte values in dotted hexadecimal format. Use 1 bit as a
wildcard. For example, to match an address exactly, use 0000.0000.0000 (can be entered as 0.0.0).
• For the optional protocol parameter, you can enter either the EtherType or the keyword.
• Entries without a protocol parameter match any protocol.
• The access list entries are scanned in the order that you enter them. The first matching entry is used.
To improve performance, place the most commonly used entries near the beginning of the access list.
• An implicit deny any any entry exists at the end of an access list unless you include an explicit
permit any any entry at the end of the list.
• All new entries to an existing list are placed at the end of the list. You cannot add entries to the
middle of a list.
Examples This example shows how to create a MAC layer access list named mac_layer that denies traffic from
0000.4700.0001, which is going to 0000.4700.0009, and permits all other traffic:
Switch(config)# mac access-list extended mac_layer
Switch(config-ext-macl)# deny 0000.4700.0001 0.0.0 0000.4700.0009 0.0.0 protocol-family
appletalk
Switch(config-ext-macl)# permit any any
Switch(config-ext-macl)# end
Switch#
Related Commands
Ipx 0x8137-0x8138
Ipv6 0x86DD
Rarp-Ipv4 0x8035 and protocol header of Rarp is Ipv4
Rarp-Non-Ipv4 0x8035 and protocol header of Rarp is a non-Ipv4 protocol family
Vines 0x0BAD, 0x0BAE, 0x0BAF
Xns 0x0600, 0x0807
Table 2-11 Mapping an Ethernet Packet to a Protocol Family
Protocol Family Ethertype in Packet Header
Command Description
show vlan access-map Displays VLAN access map information.