FTOS Configuration Guide for the C-Series - Force10 Networks

To create a filter with a specified sequence number, use these commands in the following sequence,
starting in the CONFIGURATION mode:
Step Command Syntax Command Mode Purpose
1 mac access-list standard
access-list-name
2
seq sequence-number {deny | permit}
{any | source-mac-address} [count [byte]] |
[log]
When you create the filters with specific sequence numbers, you can create the filters in any order and
FTOS orders the filters correctly.
Figure 98 illustrates how the seq command orders the filters according to the sequence number assigned.
In the example, filter 5 was configured before filter 2, but the show config command displays the filters
in the correct order.
Figure 98 seq Command Example
CONFIGURATION Enter the MAC ACCESS LIST
mode by creating a standard MAC
ACL.
MAC ACCESS LIST Configure a MAC ACL filter with a
specific sequence number.
The any keyword filters on any
source MAC address. log is not
supported on C-Series.
Note: Keep in mind when assigning sequence numbers to filters that you may need to insert a new filter.
To prevent reconfiguring multiple filters, assign sequence numbers in multiples of five or another number.
Force10(conf)#mac access-list standard stringbean
Force10(config-std-macl)#seq 5 deny 00:00:00:00:11:22
Force10(config-std-macl)#seq 2 permit any
Force10(config-std-macl)#show config
!
mac access-list standard stringbean
seq 2 permit any
seq 5 deny 00:00:00:00:11:22
Force10(config-std-macl)#
To delete a filter, use the no seq sequence-number command in the MAC ACCESS LIST mode.
If you are creating a standard ACL with only one or two filters, you can let FTOS assign a sequence
number based on the order in which the filters are configured. FTOS assigns filters in multiples of 5.
To configure a filter without a specified sequence number, use these commands in the following sequence,
starting in the CONFIGURATION mode:
Step Command Syntax Command Mode Purpose
1 mac access-list standard
access-list-name
CONFIGURATION Create a standard MAC ACL and
assign it a unique name.
192 Layer 2