Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.6 - Page 288

mac access-group Use the mac access-group command in Global Configuration or Interface Configuration mode to attach a specific MAC Access Control List (ACL) to an interface. Syntax mac access-group name [in | out | control-plane] [sequence] no mac access-group name [in | out | control-plane] • name - Name of the existing MAC access list. (Range: 1-31 characters) • [in | out | control-plane]- The packet direction. in applies the access- list to ingress packets. out applies the access-list to egress packets. controlplane applies the access-list to ingress control plane packets. control-plane is only valid in Global Configuration mode. • sequence - Order of access list relative to other access lists already assigned to this interface and direction. (Range: 1-4294967295) Default Configuration No ACLs are configured by default. Command Mode Global Configuration mode or Interface Configuration (Ethernet, VLAN or Port Channel) mode User Guidelines If the access-list specified in the command does not exist, an error is given. The ACLs in the access-group are configured in hardware when the interface becomes active. Resource contention issues will only become apparent at that time. It is recommended that ACLs be configured on an active interface as a check prior to deployment in the network. An optional sequence number may be specified to indicate the order of this access-list relative to the other access-lists already assigned to this interface and direction. A lower number indicates higher precedence order. If a sequence number already is in use for this interface and direction, the specified access-list replaces the currently attached access list using that Layer 2 Switching Commands 288