Dell POWEREDGE M1000E - Manual (Page 109)

Dell Converged Enhanced Ethernet Administrator’s Guide 91
53-1002116-01
ACL configuration and management
9
To reorder the rules in a MAC ACL, perform the following task from Privileged EXEC mode.
1. Enter the resequence command to assign sequence numbers to the rules contained in the
MAC ACL.
switch#resequence access-list mac test_02 50 5
Applying a MAC ACL to a CEE interface
Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner
that you need for this CEE interface. An ACL does not take effect until it is expressly applied to an
interface using the access-group command. Frames can be filtered as they enter an interface
(ingress direction).
To apply a MAC ACL to a CEE interface, perform the following steps from Privileged EXEC mode.
1. Enter the configure terminal command to access global configuration mode.
2. Enter the interface command to specify the CEE interface type and slot/port number.
switch(config)#interface intengigabitethernet 0/1
3. Enter the switchport command to configure the interface as a Layer 2 switch port.
4. Enter the mac-access-group command to specify the MAC ACL that is to be applied to the Layer
2 CEE interface in the ingress direction.
switch(conf-if-te-0/1)#mac access-group test_02 in
Applying a MAC ACL to a VLAN interface
Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner
that you need for this VLAN interface. An ACL does not take effect until it is expressly applied to an
interface using the access-group command. Frames can be filtered as they enter an interface
(ingress direction).
To apply a MAC ACL to a VLAN interface, perform the following steps from Privileged EXEC mode.
1. Enter the configure terminal command to access global configuration mode.
2. Enter the interface command to apply the VLAN interface to the MAC ACL.
switch(config)#interface vlan 50
3. Enter the mac-access-group command to specify the MAC ACL that is to be applied to the VLAN
interface in the ingress direction.
switch(conf-if-vl-82)# mac access-group test_02 in