Brocade Network OS NETCONF Operations Guide v4.1.1 - Manual (Page 441)

Network OS NETCONF Operations Guide 409
53-1003231-02
ACL configuration and management
28
Applying a MAC ACL to a DCB interface
Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner
that you need for a specific DCB interface. An ACL does not take effect until it is expressly applied
to an interface. Frames can be filtered as they enter an interface (ingress direction).
NOTE
The DCB interface must be configured as a Layer 2 switchport before an ACL can be applied as an
access-group to the interface.
To apply a MAC ACL to a DCB interface, perform the following steps.
1. Issue the RPC to configure the node in the
urn:brocade.com:mgmt:brocade-interface namespace.
2. Under the node, include the , ,
, or node element.
3. Under the , , ,
, or node, include the element and specify
the name of the interface in [rbridge-id/]slot/port format or port-channel number.
4. Under the , , ,
or node, include the node element to
configure the DCB interface as a layer 2 switch port.
5. Under the node, include the empty leaf element.
6. Under the , , ,
, or node, include the node element from
the urn:brocade.com:mgmt:brocade-mac-access-list namespace.
7. Under the node, include the node element.
8. Under the node, include the following leaf elements:
a. In the element, specify the name of the MAC access list you want to
apply to the DCB port.
b. Optional: In the element, specify “in” or “out” to associate the ACL with
the port ingress traffic or egress traffic, respectively.
22/0/1