Cisco Catalyst 4500 Series Configuration Manual page 473

Chapter 2
mac access-list extended
To define the extended MAC access lists, use the mac access-list extended command. To remove the
MAC access lists, use the no form of this command.
Syntax Description
name
Command Default MAC access lists are not defined.
Command Modes Global configuration mode
Command History Release
12.1(12c)EW
Usage Guidelines When you enter the ACL name, follow these naming conventions:
•
•
•
•
•
When you enter the mac access-list extended name command, you use the following subset to create or
delete entries in a MAC layer access list:
[no] {permit | deny} {{src-mac mask | any} [dest-mac mask]} [protocol-family {appletalk |
arp-non-ipv4 | decnet | ipx | ipv6 | rarp-ipv4 | rarp-non-ipv4 | vines | xns} | <arbitrary ethertype> |
name-coded ethertype].
Table 2-10
Table 2-10
Subcommand
any
arbitrary ethertype (Optional) Specifies an arbitrary ethertype in the range 1536 to 65535
deny
mac access-list extended name
no mac access-list extended name
ACL to which the entry belongs.
Modification
This command was introduced on the Catalyst 4500 series switch.
Maximum of 31 characters long and can include a-z, A-Z, 0-9, the dash character (-), the underscore
character (_), and the period character (.)
Must start with an alpha character and must be unique across all ACLs of all types
Case sensitive
Cannot be a number
Must not be a keyword; keywords to avoid are all, default-action, map, help, and editbuffer
describes the syntax of the mac access-list extended subcommands.
mac access-list extended Subcommands
Description
Specifies any source-host or destination-host.
(Decimal or Hexadecimal)
Prevents access if the conditions are matched.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
mac access-list extended
2-433