Cisco Nexus 5000 Series Switch CLI Software Configuration Guide, NX-OS 4.0(1a)N1 (OL-16597-01, January 2009)

Send feedback to [e-mail]
20-11
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 20 Configuring ACLs
Configuring MAC ACLs
The following example shows how to change a MAC ACL:
switch# configure terminal
switch(config)# mac access-list acl-mac-01
switch(config-mac-acl)# 100 permit mac 00c0.4f00.00 0000.00ff.ffff any
switch(config-mac-acl)# statistics
switch(config-mac-acl)# show mac access-lists acl-mac-01
switch(config-mac-acl)# copy running-config startup-config
Removing a MAC ACL
You can remove a MAC ACL from the switch.
Be sure that you know whether the ACL is applied to an interface. The switch allows you to remove
ACLs that are current applied. Removing an ACL does not affect the configuration of interfaces where
you have applied the ACL. Instead, the switch considers the removed ACL to be empty.
Step 3
switch(config-mac-acl)# [sequence-number]
{permit|deny} source destination protocol
(Optional) Creates a rule in the MAC ACL. Using a
sequence number allows you to specify a position
for the rule in the ACL. Without a sequence number,
the rule is added to the end of the rules.
The permit and deny commands support many
ways of identifying traffic.
Step 4
switch(config-mac-acl)# no
{sequence-number | {permit|deny} source
destination protocol}
(Optional) Removes the rule that you specify from
the MAC ACL.
The permit and deny commands support many
ways of identifying traffic.
Step 5
switch(config-mac-acl)# [no] statistics
(Optional) Specifies that the switch maintains
global statistics for packets matching the rules in
the ACL.
The no option stops the switch from maintaining
global statistics for the ACL.
Step 6
switch(config-mac-acl)# show mac
access-lists name
(Optional) Displays the MAC ACL configuration.
Step 7
switch(config-mac-acl)# copy
running-config startup-config
(Optional) Copies the running configuration to the
startup configuration.
Command Purpose