Creating a MAC ACL rule enabled for logging

Enter the configure terminal command to access global configuration mode.
```
device# configure terminal
```
Enter the mac access-list command to create or modify an access list.
```
device(config)# mac access-list standard mac_1
```
In each rule for which you need logging, include the log keyword.
```
device(conf-mac1-std)# seq 100 deny 0022.3333.4444 log
```
If you have not yet applied the ACL to the appropriate interface, do so now.
To enable logging for Layer 2 implicit deny rules, use the command implicit-deny-log l2acl.
Note
The implicit-deny-log l2acl is under acl-policy. After using implicit-deny-log l2acl, the user must rebind the L2 ACL to ensure the change takes effect.
(Optional) To display ACL logs, enter the show access-list log buffer command.