Users Guide

Layer 2 Switching Commands 281
An implicit deny-all rule is added after the end of the last access group in each
direction (in or out).
Examples
console(config)#ip access-list aclname
console(config-ip-acl)#exit
console(config)#ip access-group aclname in
console(config)#no ip access-group aclname in
console(config)#ip access-list aclname1
console(config-ip-acl)#exit
console(config)#ip access-group aclname1 out
console(config)#interface te1/0/1
console(config-if-Te1/0/1)#ip access-group aclname out 2
console(config-if-Te1/0/1)#no ip access-group aclname out
Command History
Example and description updated in the 6.4 release.
mac access-group
Use the mac access-group command in Global Configuration or Interface
Configuration mode to attach a specific MAC Access Control List (ACL) to
an interface.
Syntax
mac access-group name [in | out | control-plane] [sequence]
no mac access-group name [in | out | control-plane]
• name — Name of the existing MAC access list. (Range: 1-31 characters)
•[in | out | control-plane]— The packet direction. in applies the access-
list to ingress packets. out applies the access-list to egress packets. control-
plane applies the access-list to ingress control plane packets. control-plane
is only valid in Global Configuration mode.
• sequence — Order of access list relative to other access lists already
assigned to this interface and direction. (Range: 1-4294967295)
Default Configuration
No ACLs are configured by default.