Manualshelf

Converged Enhanced Ethernet Administrator's Guide v6.4.0 (53-1001761-01, June 2010)

ManualsBrandsHP ManualsStorageHP SN8000B 8-slot Power Pack+ SAN Backbone Director Switch
111112113114115116117118119120
Converged Enhanced Ethernet Administrator’s Guide 89
53-1001761-01
ACL configuration and management
8
DRAFT: BROCADE CONFIDENTIAL
To reorder the rules in a MAC ACL, perform the following task from Privileged EXEC mode.
1. Enter the resequence command to assign sequence numbers to the rules contained in the
MAC ACL.
Example
switch#resequence access-list mac test_02 50 5
Applying a MAC ACL to a CEE interface
Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner
that you need for this CEE interface. An ACL does not take effect until it is expressly applied to an
interface using the access-group command. Frames can be filtered as they enter an interface
(ingress direction).
To apply a MAC ACL to a CEE interface, perform the following steps from Privileged EXEC mode.
1. Enter the configure terminal command to access global configuration mode.
2. Enter the interface command to specify the CEE interface type and slot/port number.
Example of selecting the Ten Gigabit Ethernet port number 0/1.
switch(config)#interface tengigabitethernet 0/1
3. Enter the switchport command to configure the interface as a Layer 2 switch port.
4. Enter the mac-access-group command to specify the MAC ACL that is to be applied to the Layer
2 CEE interface in the ingress direction.
Example
switch(conf-if-te-0/1)#mac access-group test_02 in
Applying a MAC ACL to a VLAN interface
Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner
that you need for this VLAN interface. An ACL does not take effect until it is expressly applied to an
interface using the access-group command. Frames can be filtered as they enter an interface
(ingress direction).
To apply a MAC ACL to a VLAN interface, perform the following steps from Privileged EXEC mode.
1. Enter the configure terminal command to access global configuration mode.
2. Enter the interface command to apply the VLAN interface to the MAC ACL.
Example
switch(config)#interface vlan 50
3. Enter the mac-access-group command to specify the MAC ACL that is to be applied to the VLAN
interface in the ingress direction.
Example
switch(conf-if-vl-82)# mac access-group test_02 in