Re: Mac access-group

From: Shanky (shankyz@gmail.com)
Date: Thu May 19 2005 - 06:37:41 GMT-3

• Next message: James Matrisciano: "RE: Sync up on Redistribution"
• Previous message: T. N. Noble: "RE: ACLs - CCO URL"
• Maybe in reply to: ccahoon@maine.rr.com: "Mac access-group"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi,

Look here for info. on applying the MAC ACLs

http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration_guide_chapter09186a0080403fec.html#wp1177176

HTH
Shanky

On 5/19/05, ccie2be <ccie2be@nyc.rr.com> wrote:
> Try this:
>
> -MAC acl's are different than on a rtr; on 3550 a mac acl is always named &
> extended and is created like this: mac access-list extended <name>. This
> puts you in (config-ext-macl) mode. Now, add in your permit and deny
> entries. These entries can include, optionally, after the source and
> destination addresses, an ethertype and mask.
> -For example, a mac acl could be used to block arp's from a specific host.
> -Applied to L2 port with mac access-group <name> in (Only in is supported.)
> -Gotcha: A mac acl can't be used to block/filter ip traffic.
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> ccahoon@maine.rr.com
> Sent: Wednesday, May 18, 2005 6:32 PM
> To: johnsheahan@charter.net; ccielab@groupstudy.com
> Subject: Re: Mac access-group
>
> I was using:
> mac access-list extended macframe
> deny any any etype-8042
> permit any any
>
> I just don't know how to apply this to a switchport?
>
> Original Message:
> -----------------
> From: johnsheahan@charter.net
> Date: Wed, 18 May 2005 17:39:18 -0400
> To: ccahoon@maine.rr.com, ccielab@groupstudy.com
> Subject: Re: Mac access-group
>
>
> Would it be:
> ACL
> <1100-1199> Extended 48-bit MAC address access list
> >
> > From: "ccahoon@maine.rr.com" <ccahoon@maine.rr.com>
> > Date: 2005/05/18 Wed PM 05:20:00 EDT
> > To: ccielab@groupstudy.com
> > Subject: Mac access-group
> >
> > I am looking for the command to apply a extended mac access-list to an
> > interface. I thought it was "mac access-group" but I can't input this in
> my
> > router, any thoughts?
> >
> > --------------------------------------------------------------------
> > mail2web - Check your email from the web at
> > http://mail2web.com/ .
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
>
>
> --------------------------------------------------------------------
> mail2web - Check your email from the web at
> http://mail2web.com/ .
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

• Next message: James Matrisciano: "RE: Sync up on Redistribution"
• Previous message: T. N. Noble: "RE: ACLs - CCO URL"
• Maybe in reply to: ccahoon@maine.rr.com: "Mac access-group"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Fri Jun 03 2005 - 10:11:59 GMT-3