Command Line Interface
7091553-KDU 137 365 Uen D 2006-06-16
Example
Related Commands
permit, deny (section 7.8.11 on page 709)
mac access-group (section 7.8.16 on page 717)
show mac access-list (section 7.8.12 on page 711)
7.8.11 permit, deny (MAC ACL)
This command adds a rule to a MAC ACL. The rule filters packets matching a
specified MAC source or destination address (that is, physical layer address), or
Ethernet protocol type. Use the no form to remove a rule.
Syntax
[no] {permit | deny}
{any | host <source> | <source> <address-bitmask>}
{any | host <destination> | <destination> <address-
bitmask>}
[vid <vid> <vid-bitmask>] [ethertype <protocol>
[protocol-bitmask]]
Note: The default is for Ethernet II packets.
[no] {permit | deny} tagged-eth2
{any | host <source> | <source> <address-bitmask>}
{any | host <destination> | <destination> <address-
bitmask>}
[vid <vid> <vid-bitmask>] [ethertype <protocol>
[protocol-bitmask]]
[no] {permit | deny} untagged-eth2
{any | host <source> | <source> <address-bitmask>}
{any | host <destination> | <destination> <address-
bitmask>}
[ethertype <protocol> [protocol-bitmask]]
Console(config)#access-list mac jerry
Console(config-mac-acl)#