Dell C9010 Modular Chassis Switch EMC Networking Command-Line Reference Guide - Page 274

Usage Information Example Related Commands The number of entries allowed per ACL is hardware-dependent. For detailed specifications on entries allowed per ACL, refer to your line card documentation. If you configure an extended MAC ACL to be used only to filter protocol traffic for CoPP, you must enter the keyword cpu-qos. Use this command in Configuration Terminal Batch mode to configure an extended MAC access control list in a dual-homing setup. Dell(conf)#mac-access-list access-list extended TestMATExt Dell(config-ext-macl)#remark 5 IPv4 Dell(config-ext-macl)#seq 10 permit any any ev2 eq 800 count bytes Dell(config-ext-macl)#remark 15 ARP Dell(config-ext-macl)#seq 20 permit any any ev2 eq 806 count bytes Dell(config-ext-macl)#remark 25 IPv6 Dell(config-ext-macl)#seq 30 permit any any ev2 eq 86dd count bytes Dell(config-ext-macl)#seq 40 permit any any count bytes Dell(config-ext-macl)#exit Dell(conf)#do show mac accounting access-list snickers interface te 0/47 in Extended mac access-list snickers on TenGigabitEthernet 0/47 seq 10 permit any any ev2 eq 800 count bytes (559851886 packets 191402152148 bytes) seq 20 permit any any ev2 eq 806 count bytes (74481486 packets 5031686754 bytes) seq 30 permit any any ev2 eq 86dd count bytes (7751519 packets 797843521 bytes) mac access-list standard - configures a standard MAC access list. show mac accounting access-list - displays MAC access list configurations and counters (if configured). permit To pass packets matching the criteria specified, configure a filter. C9000 Series Syntax Parameters permit {any | host mac-address | mac-source-address mac-source-addressmask} {any | host mac-address | mac-destination-address mac-destinationaddress-mask} [ethertype operator] [count [byte]] | [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: ● Use the no seq sequence-number command if you know the filter's sequence number. ● Use the no permit {any | host mac-address | mac-source-address mac-source- address-mask} {any | mac-destination-address mac-destination-addressmask} command. any host mac-sourceaddress mac-sourceaddress-mask Enter the keyword any to forward all packets. Enter the keyword host then a MAC address to forward packets with that host address. Enter a MAC address in nn:nn:nn:nn:nn:nn format. (OPTIONAL) Specify which bits in the MAC address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. 274 Access Control Lists (ACL)