Reference Guide

The vlan and cos parameters refer to the VLAN identifier and 802.1p user priority fields, respectively, of
the VLAN tag. For packets containing a double VLAN tag, this is the first (or outer) tag.
The time-range parameter allows imposing time limitation on the MAC ACL rule as defined by the
parameter time-range-name. If a time range with the specified name does not exist and the MAC ACL
containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is applied
immediately. If a time range with specified name exists and the MAC ACL containing this ACL rule is
applied to an interface or bound to a VLAN, then the ACL rule is applied when the time-range with
specified name becomes active. The ACL rule is removed when the time-range with specified name
becomes inactive. For information about configuring time ranges, see Time Range Commands for Time-
Based ACLs on page 653.
The assign-queue parameter allows specification of a particular hardware queue for handling trac that
matches this rule. The allowed queue-id value is 0-(n-1), where n is the number of user configurable
queues available for the hardware platform. The assign-queue parameter is valid only for a permit rule.
Note
The special command form {deny | permit} any any is used to match all Ethernet layer 2
packets, and is the equivalent of the IP access list “match every” rule.
The permit command’s optional attribute rate-limit allows you to permit only the allowed rate of trac
as per the configured rate in kbps, and burst-size in kbytes.
The following shows an example of the command.
(Extreme 220) (Config) #mac access-list extended mac1
(Extreme 220) (Config-mac-access-list)#permit 00:00:00:00:aa:bb ff:ff:ff:ff:00:00 any rate-
limit 32 16
(Extreme 220) (Config-mac-access-list)#exit
no sequence-number
Use this command to remove the ACL rule with the specified sequence number from the ACL.
Format
no sequence-number
Mode MAC-Access-List Config
mac access-group
This command either attaches a specific MAC ACL identified by name to an interface or range of
interfaces, or associates it with a VLAN ID, in a given direction. The name parameter must be the name
of an existing MAC ACL.
An optional sequence number may be specified to indicate the order of this mac access list relative to
other mac access lists already assigned to this interface and direction. A lower number indicates higher
precedence order. If a sequence number is already in use for this interface and direction, the specified
mac access list replaces the currently attached mac access list using that sequence number. If the
sequence number is not specified for this command, a sequence number that is one greater than the
highest sequence number currently in use for this interface and direction is used.
Quality of Service Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 622