Access Control Lists (ACL) | 121
mac access-list standard
Name a new or existing MAC access control list (MAC ACL) and enter the MAC ACCESS LIST 
mode to configure a standard MAC ACL. See Commands Common to all ACL Types and Common 
MAC Access List Commands.
Syntax
mac access-list standard mac-list-name
Parameters
Defaults
Not configured
Command Modes
CONFIGURATION
Command
History
Usage
Information
FTOS supports one ingress and one egress MAC ACL per interface. 
The number of entries allowed per ACL is hardware-dependent. For detailed specification on entries 
allowed per ACL, refer to your switch documentation.
The MXL Switch supports both ingress and egress ACLs.
Example
Figure 6-7.  mac access-list standard Command Example
permit
Configure a filter to forward packets from a specific source MAC address. 
Syntax
permit {any | mac-source-address [mac-source-address-mask]} [count [byte]] 
To remove this filter, you have two choices: 
• Use the no seq sequence-number command if you know the filter’s sequence number.
• Use the no permit {any | mac-source-address mac-source-address-mask} command.
Parameters
 
mac-list-name
Enter a text string as the name of the standard MAC access list (140 character 
maximum).
Version 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module
FTOS(conf)#mac access-list standard TestMAC
FTOS(conf-std-macl)#?
deny                    Specify packets to reject
description             List description
exit                    Exit from access-list configuration mode
no                      Negate a command or set its defaults
permit                  Specify packets to forward
remark                  Specify access-list entry remark
seq                     Sequence numbers
show                    Show Standard ACL configuration
any Enter the keyword any to forward all packets received with a MAC 
address.
mac-source-address 
Enter a MAC address in nn:nn:nn:nn:nn:nn format.
mac-source-address-mask
(OPTIONAL) Specify which bits in the MAC address must match. If 
no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other 
words, the filter allows only MAC addresses that match).