Changing a MAC ACL
You can remove a MAC ACL from the device.
Before you begin
Use the
show mac access-lists
command with the
summary
keyword to find the interfaces on which a MAC
ACL is configured.
SUMMARY STEPS
1.
configure terminal
2.
mac access-list name
3.
(Optional) [
sequence-number
] {
permit
|
deny
}
source destination-protocol
4.
(Optional)
no
{
sequence-number
| {
permit
|
deny
}
source destination-protocol
}
5.
(Optional) [
no
]
statistics per-entry
6.
(Optional)
show mac access-lists name
7.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Enters ACL configuration mode for the ACL that you
specify by name.
mac access-list name
Example:
Step 2
switch(config)# mac access-list acl-mac-01
switch(config-mac-acl)#
Creates a rule in the MAC ACL. Using a sequence number
allows you to specify a position for the rule in the ACL.
(Optional) [
sequence-number
] {
permit
|
deny
}
source
destination-protocol
Step 3
Without a sequence number, the rule is added to the end of
the rules.
Example:
switch(config-mac-acl)# 100 permit mac
00c0.4f00.0000 0000.00ff.ffff any 0x0806
The
permit
and
deny
commands support many ways of
identifying traffic.
Removes the rule that you specify from the MAC ACL.
(Optional)
no
{
sequence-number
| {
permit
|
deny
}
source
destination-protocol
}
Step 4
The
permit
and
deny
commands support many ways of
identifying traffic.
Example:
switch(config-mac-acl)# no 80
Specifies that the device maintains global statistics for
packets that match the rules in the ACL.
(Optional) [
no
]
statistics per-entry
Example:
Step 5
The
no
option stops the device from maintaining global
statistics for the ACL.
switch(config-mac-acl)# statistics per-entry
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
288
Configuring MAC ACLs
Changing a MAC ACL
