mac-
destination-
address-mask
Specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask; therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
ethertype
operator
(OPTIONAL) To filter based on protocol type, enter one of
the following Ethertypes:
•
ev2
- is the Ethernet II frame format
•
llc
- is the IEEE 802.3 frame format
•
snap
- is the IEEE 802.3 SNAP frame format
count
(OPTIONAL) Enter the keyword
count
to count packets
processed by the filter.
byte
(OPTIONAL) Enter the keyword
byte
to count bytes
processed by the filter.
Defaults
Not configured.
Command
Modes
CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command
History
Version 8.3.16.1
Introduced on the MXL 10/40GbE Switch IO Module.
Related
Commands
permit
— configures a MAC address filter to pass packets.
seq
— configures a MAC address filter with a specified sequence number.
mac access-list extended
Name a new or existing extended MAC access control list (extended MAC ACL).
Syntax
mac access-list extended
access-list-name
[cpu-qos]
Parameters
access-list-
name
Enter a text string as the MAC access list name, up to 140
characters.
cpu-qos
Enter the keyword
cpu-qos
to assign this ACL to control
plane traffic only (CoPP).
Defaults
None
Command
Modes
CONFIGURATION
Access Control Lists (ACL)
191