Users Guide

Version Description
8.3.11.1 Introduced on the Z9000.
8.3.7.0 Introduced on the S4810.
8.5.1.0 Added support for 4-port 40G line cards on ExaScale.
8.1.1.0 Introduced on the E-Series ExaScale.
7.8.1.0 Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series
6.1.1.0 Introduced on the E-Series.
Usage Information The ACL hit counters increment the counters for each matching rule, not just the rst matching rule.
Example
Dell#show mac accounting access-list TestMac interface tengigabitethernet
1/8 in
Ingress Standard mac access-list TestMac on TenGigabitEthernet 1/89
Total cam count 2
seq 5 permit aa:aa:aa:aa:00:00 00:00:00:00:ff:ff count (0 packets)
seq 10 deny any count (20072594 packets)
Dell#
Standard MAC ACL Commands
When you create an access control list without any rule and then apply it to an interface, the ACL behavior reects implicit permit.
These commands congure standard MAC ACLs and support both Ingress and Egress MAC ACLs.
NOTE: For more information, also refer to the Commands Common to all ACL Types and Common MAC Access List
Commands sections.
deny
To drop packets with a the MAC address specied, congure a lter.
Syntax
deny {any | mac-source-address [mac-source-address-mask]} [count [byte]]
[log] [monitor]
To remove this lter, you have two choices:
• Use the no seq sequence-number command if you know the lter’s sequence number.
•
Use the no deny {any | mac-source-address mac-source-address-mask} command.
Parameters
any Enter the keyword any to specify that all routes are subject to the lter.
mac-source-
address
Enter a MAC address in nn:nn:nn:nn:nn:nn format.
mac-source-
address-mask
(OPTIONAL) Specify which bits in the MAC address must match. If no mask is
specied, a mask of 00:00:00:00:00:00 is applied (in other words, the lter allows
only MAC addresses that match).
count (OPTIONAL) Enter the keyword count to count packets processed by the lter.
Access Control Lists (ACL)
229