Mac access-group – Dell POWEREDGE M1000E User Manual

Page 163

Dell Converged Enhanced Ethernet Command Reference

147

53-1002115-01

mac access-group

Applies rules specified in a MAC ACL to traffic entering an interface.

Synopsis

mac access-group name [in]

no mac access-group name

Operands

name

Specifies the name of the standard or extended MAC access list.

Specifies to filter inbound packets only.

Default

There are no access lists applied to the interface.

Command

Modes

Interface configuration mode

Description

Use this command to apply a MAC ACL to a Layer 2 or a VLAN interface. You create the MAC ACL by
using the mac access-list global configuration command. Use the no mac access-group command
to remove the MAC ACL from the interface.

Usage

Guidelines

You can assign one MAC ACL (standard or extended) to an interface.

When a packet is received on an interface with a MAC ACL applied, the switch checks the rules in
the ACL. If any of the rules match, the switch permits or drops the packet, according to the rule. If
the specified ACL does not exist, the switch permits all the packets.

Example

To apply a MAC ACL named macacl2 on an interface:

switch(conf-if)#mac access-group macacl2 in

To remove a MAC ACL named macacl2 from an interface:

switch(conf-if)#no mac access-group macacl2