Dell C1048P Port Extender Networking Command-Line Reference Guide for the C900 - Page 312

Example If no access-list is attached to the interface, no information displays and you are returned to the DELL# prompt. show mac accounting access-list mac access-list standard mac seq 5 permit 11:22:33:44:55:66 count seq 10 deny any log threshold-in-msgs 10 interval 5 order 1 seq 15 permit any order 2 monitor ! Standard MAC ACL Commands The following commands configure standard MAC ACLs. The C9000 supports both Ingress and Egress MAC ACLs. When you create an access control list without any rule and then apply it to an interface, the ACL behavior reflects implicit permit. NOTE: For more information, also refer to the Commands Common to all ACL Types and Common MAC Access List Commands sections. deny To drop packets with a matching MAC address, configure a filter. C9000 Series Syntax deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter's sequence number. • Use the no deny {any | mac-source-address mac-source-addressmask} command. Parameters any mac-sourceaddress mac-sourceaddress-mask count Enter the keyword any to specify that all routes are subject to the filter. Enter a MAC address in nn:nn:nn:nn:nn:nn format. (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). (OPTIONAL) Enter the keyword count to count packets processed by the filter. 312 Access Control Lists (ACL)