why my mac vlan acl not work fine

[mike.cao]

This is my config:

mac access-list extended maccon

permit host ?.?.?.? any

permit any host ?.?.?.?

vlan access-map mac_access 10

match mac address maccon

action forward

vlan filter mac_access vlan-list 30

inter vlan 30

mac packet-classify

I have 50 desktop pc。45 of them work fine.BUT 5 of them can't ping some of other network address.why?

[jackyoung]

Are the 45 PC work randomly or fixed 45 PC work but remining 5 not ?

If not, are the 5 PC belong to the lowest mac access-list location ?

Can you tell the switch model and sw ver. ?

[mike.cao]

5 pc work not randomly,it's fixed.They are not belong to the lowest mac access-list location.

switch:catalyst 6509

IOS:12.2(18)sxd7

[jackyoung]

I am not sure did you enable the mac-address-table limit per vlan. Can you check the result of "show mac-address-table limit" ?

If there is limit, try "mac-address-table limit vlan 50 maximum n", where the n is the max. max address in the VLAN 30.

Lnik here FYI :

http://www.cisco.com/en/US/products/hw/switches/ps708/products_command_reference_chapter09186a00801eaed6.html#wp1643725

If you do not have the limitation on it, then I have no idea on the configuration, you may need to try to upgrade the IOS for test. Or check w/ Cisco to determine any bug related to this limitation.

Hope this helps.