Cisco SF220-24

Access Control
Configuring MAC-based ACEs
Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 237
17
STEP 5 Click MAC-Based ACE Table.
The MAC-Based ACE page opens. You can view and/or add rules to this MAC-
based ACL. See Configuring MAC-based ACEs for more details.
Configuring MAC-based ACEs
To add rules (ACEs) to a MAC-based ACL:
STEP 1 Click Access Control > MAC-Based ACE.
STEP 2 Select a MAC-based ACL, and click Go. All currently defined MAC-based ACEs in
the ACL are listed.
STEP 3 To add a rule (ACE) for the selected ACL, click Add.
STEP 4 Enter the following information:
• ACL Name—Displays the name of the ACL to which the ACE is being added.
• Priority—Enter the priority of the ACE. ACEs with higher priority are
processed first. One is the highest priority.
• Action—Select the action taken upon a match. The options are:
-
Permit —Forwards packets that meet the ACE criteria.
-
Deny —Drops packets that meet the ACE criteria.
-
Shutdown —Drops packets that meet the ACE criteria, and disables the
port from where the packets were received. These ports can be
reactivated on the Port Management > Error Recovery Settings page.
• Destination MAC Address—Select Any if all destination addresses are
acceptable, or select User Defined to enter a destination address or a range
of destination addresses.
-
Destination MAC Address Value —Enter the MAC address to which the
destination MAC address will be matched and its mask (if relevant).