C
HAPTER
25
| Access Control Lists
MAC ACLs
– 722 –
mac access-group This command binds a MAC ACL to a port. Use the no form to remove the
port.
SYNTAX
mac access-group acl-name in [time-range time-range-name]
acl-name – Name of the ACL. (Maximum length: 16 characters)
in – Indicates that this list applies to ingress packets.
time-range-name - Name of the time range.
(Range: 1-30 characters)
DEFAULT SETTING
None
COMMAND MODE
Interface Configuration (Ethernet)
COMMAND USAGE
â—† Only one ACL can be bound to a port.
â—† If an ACL is already bound to a port and you bind a different ACL to it,
the switch will replace the old binding with the new one.
EXAMPLE
Console(config)#interface ethernet 1/2
Console(config-if)#mac access-group jerry in
Console(config-if)#
RELATED COMMANDS
show mac access-list (723)
Time Range (572)
show mac
access-group
This command shows the ports assigned to MAC ACLs.
COMMAND MODE
Privileged Exec
EXAMPLE
Console#show mac access-group
Interface ethernet 1/5
MAC access-list M5 in
Console#
RELATED COMMANDS
mac access-group (722)