How do I set up a MAC Access Control List (ACL) with two rules using CLI commands on my managed switch?

Create a new MAC ACL acl_bpdu.

(Netgear Switch) # (Netgear Switch) #config (Netgear Switch) (Config)#mac access-list extended acl_bpdu
Deny all the traffic that has destination MAC 01:80:c2:xx:xx:xx.

(Netgear Switch) (Config-mac-access-list)#deny any 01:80:c2:00:00:00 00:00:00:ff:ff:ff
Permit all the other traffic.

(Netgear Switch) (Config-mac-access-list)#permit any (Netgear Switch) (Config-mac-access-list)#exit
Apply the MAC ACL acl_bpdu to port 1/0/2.

(Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#mac access-group acl_bpdu in

For more information, see the following support articles:

This article applies to the following managed switches and their respective firmware:

Last Updated:07/07/2025 | Article ID: 21721