Brocade Communications Systems 53-1001761-01 사용자 설명서
Converged Enhanced Ethernet Administrator’s Guide
89
53-1001761-01
ACL configuration and management
8
DRAFT: BROCADE CONFIDENTIAL
To reorder the rules in a MAC ACL, perform the following task from Privileged EXEC mode.
1. Enter the resequence command to assign sequence numbers to the rules contained in the
MAC ACL.
Example
switch#resequence access-list mac test_02 50 5
Applying a MAC ACL to a CEE interface
Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner
that you need for this CEE interface. An ACL does not take effect until it is expressly applied to an
interface using the access-group command. Frames can be filtered as they enter an interface
(ingress direction).
that you need for this CEE interface. An ACL does not take effect until it is expressly applied to an
interface using the access-group command. Frames can be filtered as they enter an interface
(ingress direction).
To apply a MAC ACL to a CEE interface, perform the following steps from Privileged EXEC mode.
1. Enter the configure terminal command to access global configuration mode.
2. Enter the interface command to specify the CEE interface type and slot/port number.
Example of selecting the Ten Gigabit Ethernet port number 0/1.
switch(config)#interface tengigabitethernet 0/1
3. Enter the switchport command to configure the interface as a Layer 2 switch port.
4. Enter the mac-access-group command to specify the MAC ACL that is to be applied to the Layer
2 CEE interface in the ingress direction.
Example
switch(conf-if-te-0/1)#mac access-group test_02 in
Applying a MAC ACL to a VLAN interface
Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner
that you need for this VLAN interface. An ACL does not take effect until it is expressly applied to an
interface using the access-group command. Frames can be filtered as they enter an interface
(ingress direction).
that you need for this VLAN interface. An ACL does not take effect until it is expressly applied to an
interface using the access-group command. Frames can be filtered as they enter an interface
(ingress direction).
To apply a MAC ACL to a VLAN interface, perform the following steps from Privileged EXEC mode.
1. Enter the configure terminal command to access global configuration mode.
2. Enter the interface command to apply the VLAN interface to the MAC ACL.
Example
switch(config)#interface vlan 50
3. Enter the mac-access-group command to specify the MAC ACL that is to be applied to the VLAN
interface in the ingress direction.
Example
switch(conf-if-vl-82)# mac access-group test_02 in