.. _example_interfaces_bridge_hardware-offload_denied-macs_deniedmacs:

###########
Denied Macs
###########

The following scenario shows how to configure the hardware switch
so that it drops all packets from a given MAC address or only
accepts packets from the configured ones at port level.

.. image:: topology.svg
  :width: 800

***********************
Test Switch Denied List
***********************

Description
===========

In this scenario, the hardware switch is configured to
deny all traffic from DUT2's ``eth2`` MAC
address (``DE:AD:BE:EF:6C:22``), but not from DUT2.

Scenario
========

.. include:: deniedmacs/testswitchdeniedlist

.. raw:: html

  <hr>

************************
Test Switch Allowed List
************************

Description
===========

In this scenario, the bridge port ``eth0p0``,
which is connected to DUT2 is configured to allow traffic
only from DUT2's ``eth2`` MAC address
(``DE:AD:BE:EF:6C:22``). Then, the allowed MAC address
is changed to another one to deny traffic from that port.

Scenario
========

.. include:: deniedmacs/testswitchallowedlist

.. raw:: html

  <hr>