Applying a Layer 2 ACL to a Service Instance
Applying a Layer 2 ACL to a Service Instance
Perform this task to apply a Layer 2 ACL to a service instance. Note that packet filtering takes place only
after the ACL has been created and applied to the service instance.
Before You Begin
Before applying an ACL to a service instance, you must create it using the mac access-list extended command.
See the "Creating a Layer 2 ACL" section.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface type number
4. service instance id ethernet
5. encapsulation dot1q vlan-id
6. mac access-group access-list-name in
7. bridge -domain bridge-id in
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Device> enable
Step 2
configure terminal
Example:
Device# configure terminal
Step 3
interface type number
Example:
Device(config)# interface gigabitethernet 1/0/0
Step 4
service instance id ethernet
Example:
Device(config-if)# service instance 100
ethernet
Layer 2 Configuration Guide for Cisco NCS 4200 Series
28
Layer 2 Access Control Lists on EVCs
Purpose
Enables privileged EXEC mode.
• Enter your password if prompted.
Enters global configuration mode.
Specifies the type and location of the interface to configure,
where:
• type --Specifies the type of the interface.
• number --Specifies the location of the interface.
Configures an Ethernet service instance on an interface and
enters Ethernet service configuration mode.