Displays information about the ACLs using MAC addresses as a parameter.

Syntax   acl-mac-show name name-string id action permit|deny [src-mac mac-address] [src-mac-mask mac-address] [dst-mac mac-address] [dst-mac-mask mac-address] [ether-type ipv4|arp|wake|rarp|vlan|ipv6|mpls-uni|mpls-multi|jumbo|aoe|dot1X|lldp|ecp|macsec|ptp|fcoe|fcoe-init|qinq] [vnet vnet-name] [vlan vlan-id] [scope local|fabric] [port port-number

name name-string

Specifies the name of the ACL.


Specifies the ID generated by ONVL.

action permit|deny

Specifies the permission of the ACL to be either permit or deny.

src-mac mac-address

Specifies the source MAC address of the ACL. The value can be any to match all MAC addresses

src-mac-mask mac-address

Specifies the source MAC address mask.

dst-mac mac-address

Specifies the destination MAC address of the ACL. The value can be any to match all MAC addresses.

dst-mac-mask mac-address

Specifies the destination MAC address mask.

ether-type ipv4|arp|wake|rarp|

Specifies the EtherType value.

vnet vnet-name

Specify the name of the VNET.

vlan vlan-id

Specifies the VLAN identifier.

scope local|fabric

Specifies the scope of the ACL.

port port-number

Specifies the switch port number.

Formatting Options

format fields-to-display

Display output using a specific parameter. Use all to display all possible output.

parsable-delim character

Display output formatted for machine parsing using a specified delimiter.


Display output in ascending order.


Display output in descending order.

show dups

Display duplicate entries in the output.

layout vertical|horizontal

Format the output in a vertical or horizontal layout.

show-interval seconds-interval

Repeat the show command at a specified interval.


Display column headers or not.

limit-output number

Limit the display output to a specific number of entries.


Display the number of entries in the output. This is useful with vRouter show commands.


Display full values in the output instead of scaled approximate values.


Display integer values instead of mapped values


Aggregate output by specific parameters. If sum-by fields are specified, records that have the same value in sum-by fields are combined and displayed as one aggregate record. NOTE: This option is only available for show commands that collect statistics such as connection-stats-show.

Defaults   None

Access   CLI


Version 1.2.1

Command introduced.

Version 2.4.1

The parameter, vnet, added.

Version 2.5.2

The parameter, scope local|fabric|cluster,deprecated.

Usage   MAC access control lists (ACLs) filter network traffic. This command displays a list of MAC ACLs.

Examples  This example shows how to list all MAC ACLs.

CLI network-admin@switch > acl-mac-show

name      id               action  src  dst  type  vlan  scope   port

MyMacACl 54147812341841957 deny e0:f8:47:14:3c:2e ff:ff:ff:ff:ff:ffipv4 0

local 0




See Also