Users Guide

monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic
that you want to monitor and the ACL in which you are creating the rule is applied
to the monitored interface. For more information, see “Flow-based Monitoring” in
the Port Monitoring section of the Dell Networking OS Configuration Guide.
Defaults Not configured.
Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD
Command
History
This guide is platform-specific. For command information about other platforms, see the relevant Dell
Networking OS Command Line Reference Guide.
Version Description
9.8(0.0P5) Introduced on the S4048-ON.
9.8(0.0P2) Introduced on the S3048-ON.
9.7(0.0) Introduced on the S6000–ON.
9.2(1.0) Introduced on the Z9500.
9.0.2.0 Introduced on the S6000.
8.3.19.0 Introduced on the S4820T.
8.3.11.1 Introduced on the Z9000.
8.3.7.0 Introduced on the S4810.
8.1.1.0 Introduced on the E-Series.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series.
6.1.1.0 Introduced on the E-Series.
Usage
Information
When you use the log option, the CP processor logs details about the packets that match. Depending on
how many packets match the log entry and at what rate, the CP may become busy as it has to log these
packets’ details.
NOTE: When you configure the ACL logging and byte counters simultaneously, byte counters may
display an incorrect value. Configure packet counters with logging inst”ad.
Related
Commands
● deny — configure a MAC ACL filter to drop packets.
● seq — configure a MAC ACL filter with a specified sequence number.
seq
To a deny or permit filter in a MAC access list while creating the filter, assign a sequence number.
Syntax
deny {any | mac-source-address [mac-source-address-mask]} [count [byte]]
[log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
● Use the no seq sequence-number command if you know the filter’s sequence number.
● Use the no deny {any | mac-source-address mac-source-address-mask} command.
Parameters
any Enter the keyword any to specify that all routes are subject to the filter.
mac-source-
address
Enter a MAC address in nn:nn:nn:nn:nn:nn format.
mac-source-
address-mask
(OPTIONAL) Specify which bits in the MAC address must match. If no mask is
specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows
only MAC addresses that match).
Access Control Lists (ACL) 205