Users Guide

Layer 2 Switching Commands 286
Command History
Updated in 6.3.0.1 firmware. Secondary VLAN option added in 6.3.5 release.
Example
The following example configures a MAC ACL to deny traffic from MAC
address 0806.c200.0000.
console(config)#mac access-list extended DELL123
console(config-mac-access-list)#500 deny 0806.c200.0000 0000.0000.0000 any
ip access-group
Use the ip access-group command in Global and Interface Configuration
modes to apply an IP-based ACL on an interface or a group of interfaces.
Use the no ip access-group command to disable an IP-based ACL on an
interface or a group of interfaces.
Syntax
ip access-group name [in | out | control-plane] [seqnum]
no ip access-group name [in | out | control-plane]
• name — Access list name. (Range: Valid IP access-list name up to 31
characters in length)
• in — The access list is applied to ingress packets.
• out—The access list is applied to egress packets.
• control-plane—The access list is applied to egress control plane packets
only. This is only available in Global Configuration mode.
• seqnum — Precedence for this interface and direction. A lower sequence
number has higher precedence. Range: 1 – 4294967295. Default is 1.
Default Configuration
This command has no default configuration.
Command Mode
Global Configuration and Interface Configuration (Ethernet, VLAN, or Port
Channel) modes