Brocade Converged Enhanced Ethernet Administrator's Guide v6.1.2_cee (53-1001258-01, June 2009)

100 Converged Enhanced Ethernet Administrator’s Guide
53-1001258-01
ACL configuration procedures
7
Applying a MAC ACL to a VLAN interface
Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner
that you need for this VLAN interface. An ACL does not take effect until it is expressly applied to an
interface using the access-group command. Packets can be filtered as they enter an interface
(ingress direction).
To apply a MAC ACL to a VLAN interface, perform the following steps from Privileged EXEC mode:
Clearing MAC ACL counters
To clear MAC ACL counters, perform the following steps from Privileged EXEC mode:
Step Task Command
1. Enter global configuration mode. switch#config t
Enter configuration commands, one per
line. End with CNTL/Z.
switch(config)#
2. Specify the VLAN interface (VLAN 50 is used in
this example).
switch(config)#interface vlan 50
switch(conf-if-vl-50)#
3. Specify the MAC ACL that is to be applied to the
VLAN interface in the ingress direction.
switch(conf-if-te-0/1)#mac
access-group access_list_name in
Step Task Command
1. Clear all the MAC ACL counters for the specified
MAC ACL.
switch#clear counters access-list mac
access_list_name
2. Clear all the MAC ACL counters for the specified
interface where the MAC ACL has been applied.
The port-channel interface number must be in the
range of 1 through 63. The VLAN interface
number must be in the range of 1 through 3583.
switch#clear counters access-list mac
access_list_name [interface
{port-channel
port-channel_interface_number |
tengigabitethernet Slot/Port | vlan
vlan_interface_number}