FTOS Configuration Guide for the C-Series - Force10 Networks

Step Command Syntax Command Mode Purpose
2
mac access-group access-list-name
{in [vlan vlan-range] | out}
To view which MAC ACL is applied to an interface, use the show config command (Figure 52) in the
INTERFACE mode or the show running-config command in the EXEC mode.
Force10(conf-if-gi-0/4)#show config
!
interface GigabitEthernet 0/4
no ip address
switchport
mac access-group dunedin out
no shutdown
Force10(conf-if-gi-0/4)#
Figure 103 show config Command in the INTERFACE Mode
Specifying a CAM portion for MAC ACLs
For E-Series EtherScale line cards, you can change the allocation in the Layer 2 CAM between MAC
addresses and MAC ACLs. By default, 75% of the Layer 2 CAM is reserved for MAC addresses and the
remaining 25% is reserved for MAC ACLs.
To reallocate the Layer 2 CAM for MAC ACLs, use the following command:
Command Syntax Command Mode Purpose
mac cam fib-partition {25 | 50 | 75 |
100} slot-number
After you enter this command, FTOS displays the following message and prompt:
Line card should be reset for new CAM entries to take effect.
Proceed with reset? [yes/no]:
Figure 104 Prompt After Issuing the mac cam fib-partition Command
INTERFACE Purpose: Apply a MAC ACL to traffic
entering or exiting an interface.
• in: configure the ACL to filter
incoming traffic
• out: configure the ACL to filter
outgoing traffic. Available only with
E-Series TeraScale cards.
• vlan vlan-range: (OPTIONAL)
specify a range of VLANs.
CONFIGURATION Reapportion the Layer 2 CAM space for
MAC addresses.
• Enter 25 (25% allocated to MAC
addresses), 50, 75, or 100.
• slot-number range: 0 to 13 for E1200; 0 to
6 for E600; 0 to 5 for E300
FTOS Configuration Guide, version 7.7.1.0 197