HP 8/8 Converged Enhanced Ethernet Administrator's Guide v6.4.0 (53-1001761-01 - Page 109
Creating an extended MAC ACL and adding rules, Modifying MAC ACL rules
View all HP 8/8 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 109 highlights
DRAFT: BROCADE CONFIDENTIAL ACL configuration and management 8 3. Enter the deny command to create a rule in the MAC ACL to drop traffic with the source MAC address. switch(conf-macl-std)#deny 0022.3333.4444 count 4. Enter the permit command to create a rule in the MAC ACL to permit traffic with the source MAC address. switch(conf-macl-std)#permit 0022.5555.3333 count 5. Use the seq command to create MAC ACL rules in a specific sequence. switch(conf-macl-std)#seq 100 deny 0011.2222.3333 count switch(conf-macl-std)#seq 1000 permit 0022.1111.2222 count Creating an extended MAC ACL and adding rules NOTE You can use the resequence command to change all the sequence numbers assigned to the rules in a MAC ACL. For detailed information, see "Reordering the sequence numbers in a MAC ACL" on page 88. The MAC ACL name length is limited to 64 characters. To create an extended MAC ACL and add rules, perform the following steps from Privileged EXEC mode. 1. Enter the configure terminal command to access global configuration mode. 2. Create an extended MAC ACL and enter ACL configuration mode. Example of setting the name of the extended MAC ACL to "test_02." switch(config)#mac access-list extended test_02 3. Create a rule in the MAC ACL to permit traffic with the source MAC address and the destination MAC address. Example switch(conf-macl-ext)#permit 0022.3333.4444 0022.3333.5555 4. Use the seq command to insert the rule anywhere in the MAC ACL. Example switch(conf-macl-std)#seq 5 permit 0022.3333.4444 0022.3333.5555 5. Enter the copy command to save the running-config file to the startup-config file. switch(conf-macl-std)#exit switch(config)#end switch#copy running-config startup-config Modifying MAC ACL rules You cannot modify the existing rules of a MAC ACL. However, you can remove the rule and then recreate it with the desired changes. If you need to add more rules between existing rules than the current sequence numbering allows, you can use the resequence command to reassign sequence numbers. For detailed information, see "Reordering the sequence numbers in a MAC ACL" on page 88. Converged Enhanced Ethernet Administrator's Guide 87 53-1001761-01