mac access-list extended

Creates a MAC extended access control list (ACL).

Syntax

mac access-list extended ACL-name

no mac access-list extended ACL-name

Parameters

ACL-name: Specifies an ACL name unique among all ACLs (Layer 2 and Layer 3). The name can be up to 63 characters in length, and must begin with an alphanumeric character. No special characters are allowed, except for the underscore (_) and hyphen (-).

Modes

Global configuration mode

Usage Guidelines

If the ACL is already created, this command puts the device in MAC extended ACL configuration mode.

An extended ACL contains rules that permit or deny traffic according to source and destination addresses, as well as other parameters. Extended ACLs allow you to filter traffic based on the following:

Source MAC address
Destination MAC address
EtherType

You can apply MAC extended ACLs to VLANs and to Layer 2 interfaces.

To enable ARP Guard, you also use a MAC extended ACL.

The no form of the command removes a MAC extended ACL from an interface.

Examples

The following example creates a MAC extended ACL named mac1.

device(config)# mac access-list extended mac1

The following example deletes a MAC extended ACL named mac1.

device(conf-macl-ext)# no mac access-list extended mac1