D-Link DGS-6600-48T Product Manual - Page 410

DGS-6604 m mac access-list mac access-list Use the mac access-list command to create a MAC access list in the configuration. Enter this command to go into mac access-list configuration mode. Use the no form of the command to delete a MAC access list. mac access-list extended NAME no mac acces-list extended NAME Syntax Description NAME The name of the MAC access list being created. The syntax is a general string with no spaces of up to 32 characters. Default Command Mode Usage Guideline Example An implicit deny statement for all addresses. Global configuration To apply an access list to an interface, create the list with the mac access-list extended command. An interface can have only one MAC access list, one IP access list and one IPv6 access list applied to it. Use this command to enter the mac access-list configuration mode, then use the permit/deny command to specify the entries. Access lists names must be unique among access lists. Access list names are case sensitive. A configured access list is always terminated by an implicit deny statement for all addresses. An error message will appears if the allowed number of lists is exceeded. If both a MAC access list and an IP access-list or IPv6 access-list are applied to an interface, the packet will be processed using the MAC access list first. If the packet is not dropped by the MAC access list, the packet will be then processed by the IP access list or the IPv6 access list. This order of packet handling therefore gives higher priority to the MAC access list. This example shows how to enter the mac access-list configuration mode for "daily-profile": Switch(config)# mac access-list extended daily-profile Switch(config-mac-ext-acl)# Verify the access list configuration settings with the show access-list command. CLI Reference Guide 400