#Cisco mac address filtering acl how to
#Cisco mac address filtering acl mac

For more information, please refer to the article Setting Up a Time Range on the SG350XG and SG550XG. If no time ranges exist on the switch, this field will be unavailable click the Edit link to go to the Time Range page to create or modify time ranges. Use the drop-down list to select a time range already configured on the switch to apply to the ACE. If you have enabled a time range for this ACE, the Time Range Name field will be available. If there are no existing time ranges configured on the switch, this field will be unavailable. In the Time Range field, check the Enable checkbox to have the ACE only be active during a specified time range. The display mode can be changed via the drop-down list in the top right corner of the web utility. If you are using the Basic display mode, skip to Step 12. In the Logging field, check the Enable checkbox to enable logging ACL flows that match the ACE rule. Shutdown – Drop packets that meet the criteria, then disable the port.Deny – Drop packets that meet the criteria.Permit – Forward packets that meet the criteria.In the Action field, select a radio button to determine what will happen when the ACE’s criteria are met. The range is from 1 – 2147483647, with 1 being the highest priority. The higher an ACE’s priority, the sooner it will be processed. In the Priority field, enter in a priority number for the ACE. The ACL Name field will display the name of the ACL you are adding an ACE to. The table displays any ACEs currently associated with the selected ACL. On the MAC-Based ACE page, select the ACL that you want to add an ACE to via the drop-down list at the top of the MAC-Based ACE Table and click Go. To do this, click the MAC-Based ACE Table button to go to the MAC-Based ACE page. To create these rules, an access control entry (ACE) must be added to the ACL.

#Cisco mac address filtering acl mac

Any newly created ACL will be empty that is, it won’t contain any rules to block or allow packets based on MAC addresses. Click Close to return to the MAC-Based ACL page, or create another ACL by repeating the previous step. The new ACL will be added to the MAC-Based ACL Table. This name will not impact the function of the ACL, and is only for identification purposes. In the ACL Name field, enter in the name for the new ACL. To create a new ACL, click the Add… button. The MAC-Based ACL Table will display all MAC-Based ACLs currently on the switch. Log in to the web configuration utility and choose Access Control > MAC-Based ACL. Applicable DevicesĬonfiguring MAC-Based ACLs Creating an ACL and Rules

#Cisco mac address filtering acl how to

The objective of this document is to show you how to create and configure a MAC-Based ACL on the SG350XG and SG550XG switches. Implementing a MAC-Based ACL allows you to control packets traveling across the switch at the Layer 2 level. A MAC-Based ACL uses rules that analyze a packet’s Layer 2 header for these criteria, such as MAC addresses, VLAN IDs, and Ethertype values. If a packet matches an ACL’s specified criteria, then it is either dropped or allowed to continue.

These criteria can be source or destination addresses, header fields, and other various components of a packet. Creating a MAC-Based ACL on the SG350XG and SG550XG ObjectiveĪn access control list (ACL) is a set of rules that can be created to manipulate packets depending on if they meet certain criteria.