Allied Telesis AT-8100 Series - Manual (Page 1633)

AT-8100 Switch Command Line User’s Guide
1633
MAC ACCESS-GROUP
Syntax
mac access-group id_number
Parameters
id_number
Specifies the ID number of a MAC address access control list you
want to add to a port. The range is 4000 to 4699.
Mode
Port Interface mode
Description
Use this command to add MAC address ACLs to ports on the switch. Ports
begin to filter packets as soon as they are assigned ACLs. You can add
one ACL to a port at a time with this command.
Use the no version of this command, NO MAC ACCESS-LIST, to remove
a MAC address ACL from a switch.
Note
If a port is to have both permit and deny ACLs, you must add the
permit ACLs first because ingress packets are compared against the
ACLs in the order in which they are added to a port. If you add the
deny ACLs before the permit ACLs, a port is likely to block traffic you
want it to forward.
Confirmation Command
“SHOW INTERFACE ACCESS-GROUP” on page 1643
Example
This example adds the ACL 4022 to port 15:
awplus> enable
awplus# configure terminal
awplus(config)# interface port1.0.15
awplus(config-if)# mac access-group 4022
awplus(config-if)# end
awplus# show interface port1.0.15 access-group