Cisco Sx350

ACL Commands
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide 64
2
• eth-type —The Ethernet type in hexadecimal format of the packet.
• vlan-id —The VLAN ID of the packet. (Range: 1–4094)
• cos —The Class of Service of the packet. (Range: 0–7)
• cos-wildcard —Wildcard bits to be applied to the CoS.
• time-range-name —Name of the time range that applies to this permit
statement. (Range: 1–32)
• log-input—Specifies sending an informational SYSLOG message about
the packet that matches the entry. Because forwarding/dropping is done in
hardware and logging is done in software, if a large number of packets
match an ACE containing a log-input keyword, the software might not be
able to match the hardware processing rate, and not all packets will be
logged.
User Guidelines
A MAC ACL is defined by a unique name. IPv4 ACL, IPv6 ACL, MAC ACL or policy
maps cannot have the same name
If ace-priority is omitted, the system sets the rule's priority to the current highest
priority ACE (in the current ACL) + 20. The ACE-priority must be unique per ACL.If
the user types already existed priority, then the command is rejected.
Default Configuration
No MAC access list is defined.
Command Mode
MAC Access-list Configuration mode
Example
switchxxxxxx(config)# mac access-list extended server1
switchxxxxxx(config-mac-al)#
permit 00:00:00:00:00:01 00:00:00:00:00:ff any