mac

Commands for VLAN-ACL
512
Switch(config)#vacl ipv6 access-group 600 in traffic-statistic vlan 5
49.5 vacl mac access-group
Command: vacl mac access-group {<700-1199> | WORD} {in | out} [traffic-statistic]
vlan WORD
no vacl mac access-group {<700-1199> | WORD} {in | out} vlan WORD
Function: This command configure VACL of MAC type on the specific VLAN.
Parameter: <700-1199> | WORD: Configure the numeric IP ACL (include: <700-799>
MAC standard access list, <1100-1199> MAC extended access list) or the named ACL.
in | out: Filter the ingress/egress traffic.
traffic-statistic: Enable the statistic of matched packets number.
vlan WORD: The VLAN will be bound to VACL.
Command mode: Global Mode.
Default: None.
Usage Guide: Use “;” or “-” to input the VLAN or multi-VLANs, but do not exceed 128,
and CLI length cannot exceed 80 characters. Egress direction filtering is not supported
by switch.
Example: Configure the numeric MAC ACL for Vlan 1-5.
Switch(config)#vacl mac access-group 700 in traffic-statistic vlan 1-5
49.6 vacl mac-ip access-group
Command: vacl mac-ip access-group {<3100-3299> | WORD} {in | out}
[traffic-statistic] vlan WORD
no vacl mac-ip access-group {<3100-3299> | WORD} {in | out} vlan
WORD
Function: This command configure VACL of MAC-IP type on the specific VLAN.
Parameter: <3100-3299> | WORD: Configure the numeric IP ACL or the named ACL.
in | out: Filter the ingress/egress traffic.
traffic-statistic: Enable the statistic of matched packets number.
vlan WORD: The VLAN will be bound to VACL.
Command mode: Global Mode.
Default: None.
Usage Guide: Use “;” or “-” to input the VLAN or multi-VLANs, but do not exceed 128,
and CLI length cannot exceed 80 characters. Egress direction filtering is not supported
by switch.