Mac Access-Group - Cisco Catalyst 2960 Command Reference Manual
Hide thumbs
Also See for Catalyst 2960:
- Configuration manual (2288 pages) ,
- Software configuration manual (980 pages) ,
- Command reference manual (800 pages)
Table of Contents
Advertisement
mac access-group
mac access-group
To use this command, the switch must be running the LAN Base image.
Note
Use the mac access-group interface configuration command to apply a MAC access control list (ACL)
to a Layer 2 interface. Use the no form of this command to remove all MAC ACLs or the specified MAC
ACL from the interface. You create the MAC ACL by using the mac access-list extended global
configuration command.
Syntax Description
name
in
Defaults
No MAC ACL is applied to the interface.
Command Modes
Interface configuration (Layer 2 interfaces only)
Command History
Release
12.2(25)FX
Usage Guidelines
You can apply MAC ACLs only to ingress Layer 2 interfaces.
On Layer 2 interfaces, you can filter IP traffic by using IP access lists and non-IP traffic by using MAC
access lists. You can filter both IP and non-IP traffic on the same Layer 2 interface by applying both an
IP ACL and a MAC ACL to the interface. You can apply no more than one IP access list and one MAC
access list to the same Layer 2 interface.
If a MAC ACL is already configured on a Layer 2 interface and you apply a new MAC ACL to the
interface, the new ACL replaces the previously configured one.
When an inbound packet is received on an interface with a MAC ACL applied, the switch checks the
match conditions in the ACL. If the conditions are matched, the switch forwards or drops the packet,
according to the ACL.
If the specified ACL does not exist, the switch forwards all packets.
For more information about configuring MAC extended ACLs, see the "Configuring Network Security
with ACLs" chapter in the software configuration guide for this release.
Catalyst 2960 Switch Command Reference
2-178
mac access-group {name} in
no mac access-group {name}
Specify a named MAC access list.
Specify that the ACL is applied in the ingress direction. Outbound ACLs are not
supported on Layer 2 interfaces.
Modification
This command was introduced.
Chapter 2
Catalyst 2960 Switch Cisco IOS Commands
OL-8604-04
Advertisement
Table of Contents
