Dell Converged Enhanced Ethernet Administrator’s Guide 8953-1002116-01ACL configuration and management 9In this example, the name of the standard MAC ACL is “test_01.”switch(config)#mac access-list standard test_01switch(conf-macl-std)#3. Enter the deny command to create a rule in the MAC ACL to drop traffic with the source MACaddress.switch(conf-macl-std)#deny 0022.3333.4444 count4. Enter the permit command to create a rule in the MAC ACL to permit traffic with the sourceMAC address.switch(conf-macl-std)#permit 0022.5555.3333 count5. Use the seq command to create MAC ACL rules in a specific sequence.switch(conf-macl-std)#seq 100 deny 0011.2222.3333 countswitch(conf-macl-std)#seq 1000 permit 0022.1111.2222 countCreating an extended MAC ACL and adding rulesNOTEYou can use the resequence command to change all the sequence numbers assigned to the rulesin a MAC ACL. For detailed information, see “Reordering the sequence numbers in a MAC ACL” onpage 90.The MAC ACL name length is limited to 64 characters.To create an extended MAC ACL and add rules, perform the following steps from Privileged EXECmode.1. Enter the configure terminal command to access global configuration mode.2. Create an extended MAC ACL and enter ACL configuration mode.The following example sets the name of the extended MAC ACL to “test_02.”switch(config)#mac access-list extended test_023. Create a rule in the MAC ACL to permit traffic with the source MAC address and the destinationMAC address.switch(conf-macl-ext)#permit 0022.3333.4444 0022.3333.55554. Use the seq command to insert the rule anywhere in the MAC ACL.switch(conf-macl-std)#seq 5 permit 0022.3333.4444 0022.3333.55555. Enter the copy command to save the running-config file to the startup-config file.switch(conf-macl-std)#exitswitch(config)#endswitch#copy running-config startup-configModifying MAC ACL rulesYou cannot modify the existing rules of a MAC ACL. However, you can remove the rule and thenrecreate it with the desired changes.
