Creating an extended MAC ACL

An extended ACL permits or denies traffic according to one or more of the following parameters: source address, destination address, port, ethertype, PCP value, VLAN.

1. Enter configure terminal to access global configuration mode.
   

   device# configure terminal
   

2. Enter the mac access-list extended command to create the access list.
   

   device(config)# mac access-list extended test_02
   

3. For each ACL rule, enter a permit or deny command, command, specifying the needed parameters.
   

   device(conf-macl-ext)# seq 5 permit host 0022.3333.4444 host 0022.3333.5555
   device(conf-macl-ext)# permit host 0022.3333.5555 host 0022.3333.6666
   

4. Apply the ACL that you created to the appropriate interface.