D-Link DGS-6600-48TS CLI Guide - Page 423

DGS-6604 m mac access-group mMac access-group Use the mac access-group command to specify a MAC access list to be applied to an interface. Use the no mac access-group command to remove the access group control from the interface. mac access-group NAME [in] no mac access-group NAME [in] Syntax Description NAME The name of the MAC access list to be applied. Up to 32 characters are allowed. The syntax is a general string that does not allow spaces. in Specifies that the MAC access list will be applied in the ingress direction. Default Command Mode Usage Guideline Example If the in direction is not specified, the default will be the in direction. Interface configuration Only one MAC access list can be applied to the same interface. An error message is sent if an attempt is made to apply a second MAC access list and the attempt is ignored. The MAC access list must first be created using the mac access-list command before it can be applied to interface. Otherwise, an error message will be displayed. The keyword in specifies the ingress direction check. One MAC access-list, one IP access-list and one IPv6 access-list can be applied to the same interface. The association of an access-group with an interface will consume the filtering entry resource in the switch controller. If the command is applied successfully, the number of remaining max entries will be displayed. If the resource is insufficient to commit the command, an error message will be displayed. This example shows applied MAC access-list "daily-profile" to eth3.1 Switch(config)# interface eth3.1 Switch(config-if)# mac access-group daily-profile in Verify the settings with the show access-group command. CLI Reference Guide 413