ACL Commands
78-21075-01 Command Line Interface Reference Guide
Command Mode
MAC Access-list Configuration mode
User Guidelines
After an access control entry (ACE) is added to an access control list, an implicit
deny any any condition exists at the end of the list. That is, if there are no matches,
the packets are denied. However, before the first ACE is added, the list permits all
packets.
Example
switchxxxxxx(config)# mac access-list extended server1
switchxxxxxx(config-mac-al)# deny 00:00:00:00:00:01 00:00:00:00:00:ff any
48.10 service-acl input
Use the service-acl input command in interface Configuration mode to bind an
access list(s) (ACL) to an interface.
Use the no form of this command to remove all ACLs from the interface.
Syntax
service-acl input
acl-name1 [acl-name2]
no service-acl input
Parameters
•
acl-name—Specifies an ACL to apply to the interface. See the user
guidelines. (Range: 1–32 characters).
•
permit-any—If the packet does not match the ACL criteria, it is forwarded
by default.
•
deny-any—If the packet does not match the ACL criteria, it is dropped by
default.
Default Configuration
No ACL is assigned.
default-action {
deny-any
48
|
permit-any
}
785