Administrator Guide

Version Description
9.9(0.0) Introduced on the C9010.
Usage Information
Use this command in Configuration Terminal Batch mode to enable user egress ACL for L2 control traffic in a
dual-homing setup.
mac access-group
Apply a MAC ACL to traffic entering or exiting an interface. You can apply a MAC ACL on a physical, port-channel, or VLAN interface.
C9000 Series
Syntax
mac access-group access-list-name {in [vlan vlan-range] | out}
To delete a MAC access-group, use the no mac access-group mac-list-name command.
Parameters
access-list-name Enter the name of a configured MAC access list, up to 140 characters.
vlan vlan-range (OPTIONAL) Enter the keyword vlan and then enter a range of VLANs. The range is
from 1 to 4094 (you can use IDs 1 to 4094).
NOTE: This option is available only with the keywordin option.
in Enter the keyword in to configure the ACL to filter incoming traffic.
out Enter the keyword out to configure the ACL to filter outgoing traffic.
Defaults none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell
Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version Description
9.9(0.0) Introduced on the C9010.
9.2(1.0) Introduced on the Z9500.
8.3.19.0 Introduced on the S4820T.
8.3.11.1 Introduced on the Z9000.
8.3.7.0 Introduced on the S4810.
8.1.1.0 Introduced on the E-Series ExaScale.
7.8.1.0 Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up
to 16 characters long.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series.
6.1.1.0 Introduced on the E-Series.
Usage Information You can assign one ACL (standard or extended) to an interface.
If you apply a MAC ACL on a VLAN:
• None of the VLAN members can have another ACL applied which has an entry for the VLAN.
• The VLAN cannot belong to an ACL VLAN group.
If you apply a MAC ACL on a physical or port-channel interface, a VLAN to which the port is associated cannot
have another ACL applied.
Access Control Lists (ACL) 255