FTOS Configuration Guide for the C-Series - Force10 Networks

Step Command Syntax Command Mode Purpose
2
seq sequence-number {deny | permit} {any |
host mac-address | mac-source-address
mac-source-address-mask} {any | host
mac-address | mac-destination-address
mac-destination-address-mask}
[ethertype-operator] [count [byte]] [log]
MAC ACCESS
LIST
When you create the filters with specific sequence numbers, you can create the filters in any order and
FTOS orders the filters correctly.
Figure 101 illustrates how the seq command orders the filters according to the sequence number assigned.
In the example, filter 15 was configured before filter 5, but the show config command displays the filters
in the correct order.
Figure 101 Extended MAC ACL Using the seq Command Example
Configure a MAC ACL filter.
The any keyword filters on
any source MAC address.
The host keyword followed
by a MAC address filters all
MAC addresses with that
host.
The optional
ethertype-operator values
are discussed in Table 13.
log not supported on
EtherScale line cards or
C-Series.
Note: Keep in mind that when assigning sequence numbers to filters you might need to insert a new filter.
To prevent reconfiguring multiple filters, assign sequence numbers in multiples of five or another number.
Force10(conf)#mac access-list extended dunedin
Force10(config-ext-macl)#seq 15 deny 00:00:00:11:ed:00 ff:ff:ff:ff:ff:ff 00:00:00:ab:11:00
ff:ff:ff:ff:ff:ff
Force10(config-ext-macl)#seq 5 permit host 00:00:00:00:45:ef any
Force10(config-ext-macl)#show config
!
mac access-list extended dunedin
seq 5 permit host 00:00:00:00:45:ef any
seq 15 deny 00:00:00:00:ec:00 ff:ff:ff:ff:ff:ff 00:00:00:aa:00:00 ff:ff:ff:ff:ff:ff
Force10(config-ext-macl)#
If you are creating a standard ACL with only one or two filters, you can let FTOS assign a sequence
number based on the order in which the filters are configured. FTOS assigns filters in multiples of 5.
To configure a filter without a specified sequence number, use these commands in the following sequence,
starting in the CONFIGURATION mode:
Step Command Syntax Command Mode Purpose
1 mac access-list extended
access-list-name
CONFIGURATION Create an extended MAC ACL and
assign it a unique name.
FTOS Configuration Guide, version 7.7.1.0 195