Inserting and deleting layer 2 acl clauses, Binding a layer 2 acl table to an interface – Brocade BigIron RX Series Configuration Guide User Manual

Page 668

Advertising
background image

590

BigIron RX Series Configuration Guide

53-1002484-04

Configuring Layer 2 ACLs

21

BigIron RX(config)# access-list 400 permit any any

BigIron RX(config)# access-list 400 permit any any log-enable

BigIron RX(config)# access-list 400 permit any any 100

BigIron RX(config)# access-list 400 permit any any 100 log-enable

BigIron RX(config)# access-list 400 permit any any any

BigIron RX(config)# access-list 400 permit any any any log-enable

BigIron RX(config)# access-list 400 permit any any 100 etype ipv4

BigIron RX(config)# access-list 400 permit any any 100 etype ipv4 log-enable

The following shows an example of a valid Layer 2 ACL clause.

BigIron RX(config)# access-list 400 permit any any 100 etype ipv4

Inserting and deleting Layer 2 ACL clauses

You can make changes to the Layer 2 ACL table definitions without unbinding and rebinding the
table from an interface. For example, you can add a new clause to the ACL table, delete a clause
from the table, delete the ACL table, etc.

Binding a Layer 2 ACL table to an interface

To enable Layer 2 ACL filtering, bind the Layer 2 ACL table to an interface.

NOTE

Layer 2 ACLs cannot be bound to virtual routing interfaces.

Enter a command such as the following at the Interface level of the CLI.

BigIron RX(config)# interface ethernet 4/12

BigIron RX(config-int-e100-4/12)# mac access-group 400 in

Syntax: [no] mac access-group <num> in

The <num> parameter specifies the Layer 2 ACL table ID to bind to the interface.

Increasing the maximum number of clauses per
Layer 2 ACL table

You can increase the maximum number of clauses configurable within a Layer 2 ACL table. You
can specify a maximum of 256 clauses per table. The default value is 64 clauses per table.

To increase the maximum number of clauses per Layer 2 ACL table, enter a command such as the
following at the Global CONFIG level of the CLI.

BigIron RX(config)# system-max l2-acl-table-entries 200

Syntax: system-max l2-acl-table-entries <max>

The <max> parameter specifies the maximum number of clauses per Layer 2 ACL. Enter a value
from 64 to 256.

Advertising