Reference Guide

This command specified in 'Interface Config' mode only aects a single interface, whereas the 'Global
Config' mode setting is applied to all interfaces. The VLAN keyword is only valid in the 'Global Config'
mode. The 'Interface Config' mode command is only available on platforms that support independent
per-port class of service queue configuration.
An optional control-plane is specified to apply the MAC ACL on CPU port. The control packets like
BPDU are also dropped because of the implicit deny all rule added to the end of the list. To overcome
this, permit rules must be added to allow the control packets.
Note
The keyword control-plane is only available in Global Config mode.
Note
You should be aware that the out option may or may not be available, depending on the
platform.
Format mac access-group name {{control-plane|in|out} vlan vlan-id
{in|out}} [sequence 1–4294967295]
Modes
•
Global Config
•
Interface Config
Parameter Description
name
The name of the Access Control List.
sequence
A optional sequence number that indicates the order of this IP access list relative to the other
IP access lists already assigned to this interface and direction. The range is 1 to 4294967295.
vlan-id
A VLAN ID associated with a specific IP ACL in a given direction.
The following shows an example of the command.
(Extreme 220) (Config)#mac access-group mac1 control-plane
no mac access-group
This command removes a MAC ACL identified by name from the interface in a given direction.
Format
no mac access-group name {{control-plane|in|out} vlan vlan-id
{in|out}}
Modes
•
Global Config
•
Interface Config
The following shows an example of the command.
(Extreme 220) (Routing)(Config)#no mac access-group mac1 control-plane
remark
This command adds a new comment to the ACL
rule.
Quality of Service Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 623