Mac Access-List - D-Link DGS-6600-48T Cli Reference Manual

DGS-6604 m

mac access-list

mac access-list extended NAME
no mac acces-list extended NAME
Syntax Description
NAME
Default
Command Mode
Usage Guideline
Example
Switch(config)# mac access-list extended daily-profile
Switch(config-mac-ext-acl)#
CLI Reference Guide
Use the mac access-list command to create a MAC access list in the
configuration. Enter this command to go into mac access-list configuration
mode. Use the no form of the command to delete a MAC access list.
The name of the MAC access list being created. The syntax is a general string
with no spaces of up to 32 characters.
An implicit deny statement for all addresses.
Global configuration
To apply an access list to an interface, create the list with the mac access-list
extended command. An interface can have only one MAC access list, one IP
access list and one IPv6 access list applied to it. Use this command to enter the
mac access-list configuration mode, then use the permit/deny command to
specify the entries.
Access lists names must be unique among access lists. Access list names are
case sensitive.
A configured access list is always terminated by an implicit deny statement for all
addresses.
An error message will appears if the allowed number of lists is exceeded.
If both a MAC access list and an IP access-list or IPv6 access-list are applied to
an interface, the packet will be processed using the MAC access list first. If the
packet is not dropped by the MAC access list, the packet will be then processed
by the IP access list or the IPv6 access list. This order of packet handling
therefore gives higher priority to the MAC access list.
This example shows how to enter the mac access-list configuration mode for
"daily-profile":
Verify the access list configuration settings with the show access-list command.
mac access-list
400