FTOS Configuration Guide for the C-Series - Force10 Networks

Step Command Syntax Command Mode Purpose
2
{deny | permit} {any |
source-mac-address mask} [count [byte]]
[log]
Figure 99 illustrates a standard MAC ACL in which the sequence numbers were assigned by FTOS. The
filters were assigned sequence numbers based on the order in which they were configured (for example,
the first filter was given the lowest sequence number). The show config command in the MAC ACCESS
LIST mode displays the two filters with the sequence numbers 5 and 10.
Figure 99 Standard MAC ACL Example
To view a specific configured MAC ACLs, use the show mac accounting access-list access-list-name
command (Figure 100) in the EXEC privilege mode.
Figure 100 show mac accounting access-list Command Example
To delete a filter, enter the show config in the MAC ACCESS LIST mode and locate the sequence
number of the filter you want to delete; then use the no seq sequence-number command in the MAC
ACCESS LIST mode.
Configuring an extended MAC ACL
MAC ACCESS
LIST
Force10(conf)#mac access standard belmont
Force10(config-std-macl)#permit 00:00:00:11:32:00
Force10(config-std-macl)#permit any
Force10(config-std-macl)#show config
!
mac access-list standard belmont
seq 5 permit 00:00:00:11:32:00
seq 10 permit any
Force10(config-std-macl)#
Configure a MAC ACL filter.
The any keyword filters on any
source MAC address. log is not
supported on C-Series.
Force10#show mac accounting access-list belmont interface gigabitethernet 0/1 in
Standard mac access-list belmont on GigabitEthernet 0/1
seq 5 permit 00:00:00:11:32:00
seq 10 permit any
Force10#
Extended MAC ACLs filter on source and destination MAC addresses. In addition, you have the option of
filtering traffic based on the Ethernet frame structure. FTOS offers the option to filter traffic based on one
of three Ethernet frame formats.
FTOS Configuration Guide, version 7.7.1.0 193