Security and authentication
11.3 MAC access control list
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
Configuration Manual, 11/2015, C79000-G8976-C252-10
705
You are in the MAC ACL configuration mode.
The command prompt is as follows:
cli(config-ext-macl)#
Call up the command with the following parameters:
deny {any|host<src-mac-address>}{any|host<dest-mac-address>}
The parameters have the following meaning:
Keyword for the MAC address of an
incoming connection that is locked
-
MAC address of the locked incoming
Enter a valid MAC address
Keyword for the MAC address of an
outgoing connection that is locked
-
MAC address of the locked outgoing
Enter a valid MAC address
For information on names of addresses and interfaces, refer to the section "Interface
identifiers and addresses (Page 39)".
Note
MAC address input
Use "any", if the
rule is to apply to all src and/or dest MAC addresses. This corresponds to
the MAC address "00:00:00:00:00:00".
The MAC access control list is configured.
You exit the MAC ACL configuration mode with the exit command.
You delete the MAC access control list with the
no mac access-list extended command.
You display the configuration of the access control list with the
show access-lists command.