Cisco Nexus 7000 Series Command Reference

mac port access-group
To apply a MAC access control list (ACL) to an interface, use the mac port access-group command. To
remove a MAC ACL from an interface, use the no form of this command.
mac port access-group access-list-name
no mac port access-group access-list-name
Syntax Description
Name of the MAC ACL, which can be up to 64
alphanumeric, case-sensitive characters.
access-list-name
Command Default
None
Command Modes
Interface configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Usage Guidelines
By default, no MAC ACLs are applied to an interface.
MAC ACLs apply to non-IP traffic, unless the device is configured to not classify traffic based on Layer 3
headers. If packet classification is disabled, MAC ACLs apply to all traffic.
You can use the mac port access-group command to apply a MAC ACL as a port ACL to the following
interface types:
•
Layer 2 interfaces
•
Layer 2 Ethernet port-channel interfaces
You can also apply a MAC ACL as a VLAN ACL. For more information, see the match (VLAN access-map)
command.
The device applies MAC ACLs only to inbound traffic. When the device applies a MAC ACL, the device
checks packets against the rules in the ACL. If the first matching rule permits the packet, the device continues
to process the packet. If the first matching rule denies the packet, the device drops the packet and returns an
ICMP host-unreachable message.
If you delete the specified ACL from the device without removing the ACL from an interface, the deleted
ACL does not affect traffic on the interface.
This command does not require a license.
Cisco Nexus 7000 Series Security Command Reference
498
M Commands
mac port access-group

Cisco Nexus 7000 Series Specifications

General

Chassis	Modular
Operating System	Cisco NX-OS
Latency	Sub-microsecond
IPv6 Support	Yes
Redundancy	Power supplies, fans, supervisors, fabric modules
Power Supply	AC or DC
Layer Support	L2, L3
Network Management	CLI, SNMP
Virtualization	VRF, vPC
Ports	10 Gigabit Ethernet, 40 Gigabit Ethernet, 100 Gigabit Ethernet, Fibre Channel, Fibre Channel over Ethernet (FCoE)
Supported Modules	Various (1G, 10G, 40G, 100G)
Features	FCoE, OTV, LISP
MPLS Support	Yes
Quality of Service (QoS)	Yes
Security Features	ACLs, Cisco TrustSec, Control Plane Policing (CoPP)
Dimensions	Varies by model
Weight	Varies by model
Operating Temperature	0 to 40°C (32 to 104°F)
Storage Temperature	-40°F to 158°F (-40°C to 70°C)
Humidity	5 to 95% noncondensing
MTBF	Varies by model
Number of Slots	Varies by model (9-slot, 10-slot, 18-slot)