Global configuration (config) Command History Release Name of the ACL to which the entry belongs. No mac access-list extended name Syntax Description To remove MAC ACLs, use the no form of this command. To create an extended MAC access control list (ACL) and define its access control entries (ACEs), use the mac access-list extended command in global configuration mode. The following example applies MAC ACL 101 on incoming traffic received on Gigabit Ethernet interface 0: Router> enable Router# configure terminal Router(config)# interface gigabitethernet 0 Router(config-if)# mac access-group 101 in Related Commands CommandĬonfigures an IP access list to be used for packets transmitted from the asynchronous host.ĭisplays the ACL configuration on a Layer 2 interface.ĭisplays the contents of one or all MAC ACLs.
Note The mac access-group command is supported on a VLAN subinterface only if a VLAN is already configured on the subinterface.
#Vss cisco mac address flapping series
On Catalyst 6500 series switches, this command is supported on Layer 2 ports only. If the specified MAC ACL does not exist on the interface or subinterface, all packets are passed.
#Vss cisco mac address flapping software
If the access list denies the address, the software discards the packet and returns an Internet Control Message Protocol (ICMP) host unreachable message. If the MAC access list permits the address, the software continues to process the packet. After a networking device receives a packet, the Cisco IOS software checks the source MAC address of the Gigabit Ethernet, 802.1Q VLAN, or 802.1Q-in-Q packet against the access list. MAC ACLs are applied on incoming traffic on Gigabit Ethernet interfaces and VLAN subinterfaces. This command was integrated into Cisco IOS Release 12.2(33)SXH. This command was introduced on the Cisco 12000 series Internet router. Subinterface configuration (config-subif) Command History Release No access list is applied to the interface or subinterface. This is a decimal number from 700 to 799. Number of a MAC ACL to apply to an interface or subinterface (as specified by a access-list (MAC) command).
No mac access-group access-list-number in Syntax Description To remove a MAC ACL, use the no form of this command. To use a MAC access control list (ACL) to control the reception of incoming traffic on a Gigabit Ethernet interface, an 802.1Q VLAN subinterface, an 802.1Q-in-Q stacked VLAN subinterface, use the mac access-group command in interface or subinterface configuration mode.
0 kommentar(er)
