Cisco Nexus 7000 Series - Page 287

MAC Protocols
The protocol argument can be the MAC protocol number or a keyword. The protocol number is a four-byte
hexadecimal number prefixed with 0x. Valid protocol numbers are from 0x0 to 0xffff. Valid keywords are
the following:
• aarp—Appletalk ARP (0x80f3)
• appletalk—Appletalk (0x809b)
• decnet-iv—DECnet Phase IV (0x6003)
• diagnostic—DEC Diagnostic Protocol (0x6005)
• etype-6000—EtherType 0x6000 (0x6000)
• etype-8042—EtherType 0x8042 (0x8042)
• ip—Internet Protocol v4 (0x0800)
• lat—DEC LAT (0x6004)
• lavc-sca—DEC LAVC, SCA (0x6007)
• mop-console—DEC MOP Remote console (0x6002)
• mop-dump—DEC MOP dump (0x6001)
• vines-echo—VINES Echo (0x0baf)
Examples
This example shows how to configure a MAC ACL named mac-ip-filter with rules that permit any non-IPv4
traffic between two groups of MAC addresses:
switch# configure terminal
switch(config)# mac access-list mac-ip-filter
switch(config-mac-acl)# deny 00c0.4f00.0000 0000.00ff.ffff 0060.3e00.0000 0000.00ff.ffff
ip
switch(config-mac-acl)# permit any any
Related Commands
DescriptionCommand
Configures a MAC ACL.mac access-list
Configures a deny rule in a MAC ACL.permit (MAC)
Configures a remark in an ACL.remark
Displays all MAC ACLs or one MAC ACL.show mac access-list
Enables collection of statistics for each entry in an
ACL.
statistics per-entry
Configures a time range.time-range
Cisco Nexus 7000 Series Security Command Reference
261
D Commands
deny (MAC)