l2-acl

Creates or updates the L2ACL configuration.
Syntax
l2-acl acl-name
no l2-acl

After the l2-acl command is entered to enable L2ACL configuration mode, the following configuration syntax is available:

{action{allow|block}|macmac-value}
Command Default

No L2ACL configuration is created or updated.

Parameters
acl-name
Name of the Layer 2 access control list (L2ACL).
action
Sets the handling action.
allow
Sets the handling action to allow traffic.
block
Sets the handling action to block traffic.
macmac-value
Sets the device MAC address.
Modes

Domain configuration mode

WLAN configuration mode

Zone configuration mode

Usage Guidelines

This command is available only after one of the following commands is entered:

  • domain
  • wlan
  • zone

The no form of the command deletes the specified L2ACL.

In L2ACL configuration mode, the no mac command disables the MAC value. config-zone-l2-acl is seen when Zone is version 5.2 or previous AP firmware.

Could not verify this command for SZ100 or SZ300.
Examples

The following example configures a Layer 2 ACL named list2 to allow traffic for zone2.

device# config
device(config)# zone zone2
device(config-zone)# l2-acl list2
device(config-zone-l2-acl)# allow