Users Guide

Version Description
9.8(0.0P2) Introduced on the S3048-ON.
9.7(0.0) Introduced on the S6000–ON.
9.2(1.0) Introduced on the Z9500.
9.0.2.0 Introduced on the S6000.
8.3.19.0 Introduced on the S4820T.
8.3.11.1 Introduced on the Z9000.
8.3.7.0 Introduced on the S4810.
8.1.1.0 Introduced on the E-Series ExaScale.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series.
6.1.1.0 Introduced on the E-Series.
mac access-group
Apply a MAC ACL to trac entering or exiting an interface. You can apply a MAC ACL on a physical, port-channel, or VLAN
interface.
Syntax
mac access-group access-list-name {in [vlan vlan-range] | out}
To delete a MAC access-group, use the no mac access-group mac-list-name command.
Parameters
access-list-name Enter the name of a congured MAC access list, up to 140 characters.
vlan vlan-range (OPTIONAL) Enter the keyword vlan and then enter a range of VLANs. The
range is from 1 to 4094 (you can use IDs 1 to 4094).
NOTE: This option is available only with the keywordin option.
in Enter the keyword in to congure the ACL to lter incoming trac.
out Enter the keyword out to congure the ACL to lter outgoing trac.
NOTE: The option is not available on the S-Series.
NOTE:
1. If the MAC ACL is applied on VLAN, none of the VLAN members should have an access list applied
for that VLAN.
2. If the MAC ACL is applied on a Physical or Port Channel interface, the VLAN in which this port is
associated should not have an access list applied.
3. If the MAC ACL is applied on a VLAN, then that VLAN should not belong to VLAN ACL group.
4. If the MAC ACL is applied on a VLAN ACL group, then none of the VLANs in that group should have
an access list applied on it.
Defaults
none
Command Modes INTERFACE
Access Control Lists (ACL)
237