D-Link xStack DGS-3610 Series

Chapter 44 Access Control List Configuration DGS-3610 Series Configuration Guide
44-10
The MAC extended access list (number 700 – 799) forwards or blocks the packets based on
the source and destination MAC addresses, and can also match the Ethernet protocol type.
A single MAC access list can use multiple separate access list statements to define multiple
rules. Where, all statements use a same number or name to bind these statements to a
same access list.
44.3.2 Configuring MAC Extended Access
List
The configuration of an MAC access list includes the following steps:
1. Define an MAC access list
2. Apply the access list to a specific interface
There are two methods to configure an MAC access list.
Method 1: Run the following command in the global configuration mode:
Command
Function
DGS-3610(config)# access-list id {deny |
permit}{any | host src-mac-addr} {any | host
dst-mac-addr} [ethernet-type] [cos cos]
Define an access list. For details about commands,
please see command reference.
DGS-3610(config)# interface interface
Select the interface to which the access list is to be
applied.
DGS-3610(config-if)# mac access-group
id { in | out }
Apply the access list to the specific interface
Method 2: Run the following command in the ACL configuration mode:
Command
Function
DGS-3610(config)# mac access-list
extended {id | name}
Enter the access list configuration mode
DGS-3610(config-mac-nacl)# [sn] { permit |
deny }{any | host src-mac-addr} {any | host
dst-mac-addr} [ethernet-type] [cos cos]
Add table entries for ACL. For details about
commands, please see command reference.
DGS-3610(config-mac-nacl)# exit
DGS-3610(config)# interface interface
Exit from the access control list mode and select
the interface to which the access list is to be
applied.
DGS-3610(config-if)# mac access-group
{id | name} { in | out}
Apply the access list to the specific interface