Cisco Nexus 9000 Series - Page 318

Before you begin
The interface must be configured as a Layer 2 interface.
If the interface is configured with the ip port access-group command or the ipv6 port traffic-filter command,
you cannot enable MAC packet classification until you remove the ip port access-group and ipv6 port
traffic-filter commands from the interface configuration.
Note
SUMMARY STEPS
1. configure terminal
2. Enter one of the following commands:
• interface ethernet slot/port
• interface port-channel channel-number
3. [no] mac packet-classify
4. (Optional) Enter one of the following commands:
• show running-config interface ethernet slot/port
• show running-config interface port-channel channel-number
5. (Optional) copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Enter one of the following commands:
Step 2
• Enters interface configuration mode for an Ethernet
interface.
• interface ethernet slot/port
• Enters interface configuration mode for a port-channel
interface.
• interface port-channel channel-number
Example:
switch(config)# interface ethernet 2/1
switch(config-if)#
Example:
switch(config)# interface port-channel 5
switch(config-if)#
Enables MAC packet classification on the interface. The
no option disables MAC packet classification on the
interface.
[no] mac packet-classify
Example:
switch(config-if)# mac packet-classify
Step 3
(Optional) Enter one of the following commands:
Step 4
• Displays the running configuration of the Ethernet
interface.
• show running-config interface ethernet slot/port
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
292
Configuring MAC ACLs
Enabling or Disabling MAC Packet Classification