Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

Chapter 2Catalyst 3750-E and 3560-E Switch Cisco IOS Commandsmac access-groupmac access-groupUse the mac access-group interface configuration command on the switch stack or on a standaloneswitch to apply a MAC access control list (ACL) to a Layer 2 interface. Use the no form of this commandto remove all MAC ACLs or the specified MAC ACL from the interface. You create the MAC ACL byusing the mac access-list extended global configuration command.mac access-group {name} inno mac access-group {name}Syntax DescriptionnameinSpecify a named MAC access list.Specify that the ACL is applied in the ingress direction. Outbound ACLs are notsupported on Layer 2 interfaces.DefaultsNo MAC ACL is applied to the interface.Command ModesInterface configuration (Layer 2 interfaces only)Command HistoryRelease12.2(35)SE2ModificationThis command was introduced.Usage Guidelines You can apply MAC ACLs only to ingress Layer 2 interfaces. You cannot apply MAC ACLs to Layer 3interfaces.On Layer 2 interfaces, you can filter IP traffic by using IP access lists and non-IP traffic by using MACaccess lists. You can filter both IP and non-IP traffic on the same Layer 2 interface by applying both anIP ACL and a MAC ACL to the interface. You can apply no more than one IP access list and one MACaccess list to the same Layer 2 interface.If a MAC ACL is already configured on a Layer 2 interface and you apply a new MAC ACL to theinterface, the new ACL replaces the previously configured one.If you apply an ACL to a Layer 2 interface on a switch, and the switch has an input Layer 3 ACL or aVLAN map applied to a VLAN that the interface is a member of, the ACL applied to the Layer 2interface takes precedence.When an inbound packet is received on an interface with a MAC ACL applied, the switch checks thematch conditions in the ACL. If the conditions are matched, the switch forwards or drops the packet,according to the ACL.If the specified ACL does not exist, the switch forwards all packets.For more information about configuring MAC extended ACLs, see the “Configuring Network Securitywith ACLs” chapter in the software configuration guide for this release.OL-9776-08Catalyst 3750-E and 3560-E Switch Command Reference2-331