---
title: "Update MAC Firewall policy by ID"
method: PUT
path: "/mac-firewall-policies/{id}"
tags: ["Configuration - Policy"]
---

# Update MAC Firewall policy by ID

`PUT /mac-firewall-policies/{id}`

Update an existing MAC Firewall policy by the specified ID.

## Path parameters

- `id` integer, required

## Request body

- XiqMacFirewallPolicyRequest — The MAC Firewall policy.
  - `name` string — The MAC firewall policy name
  - `description` string — The MAC firewall policy description.
  - `rules` XiqMacFirewallRuleRequest[] — List of MAC Firewall Rules
    - `action` 'PERMIT' | 'DENY' — The MAC Firewall Action.
    - `source_mac` integer — Source MAC address for MAC Firewall Rule.
    - `destination_mac` integer — Destination MAC address for MAC Firewall Rule.
    - `logging_type` 'OFF' | 'DROPPED_PACKETS' | 'SESSION_INITIATION' | 'SESSION_TERMINATION' | 'BOTH' — The logging Type for MAC Firewall Rule.

## Response `200`

OK

- XiqMacFirewall — MAC Firewall policy.
  - `id` integer, required — The unique identifier
  - `create_time` string, date-time, required — The create time in UTC (ISO 8601 format)
  - `update_time` string, date-time, required — The last update time in UTC (ISO 8601 format)
  - `org_id` integer — The organization identifier, valid when enabling HIQ feature
  - `name` string — The MAC Firewall policy name
  - `description` string — The MAC Firewall policy description.
  - `rules` XiqMacFirewallRule[] — List of MAC Firewall Rules.
    - `id` integer, required — The unique identifier
    - `create_time` string, date-time, required — The create time in UTC (ISO 8601 format)
    - `update_time` string, date-time, required — The last update time in UTC (ISO 8601 format)
    - `org_id` integer — The organization identifier, valid when enabling HIQ feature
    - `action` 'PERMIT' | 'DENY' — The MAC Firewall Action.
    - `source_mac` XiqMacObject — The MAC Object.
      - `id` integer, required — The unique identifier
      - `create_time` string, date-time, required — The create time in UTC (ISO 8601 format)
      - `update_time` string, date-time, required — The last update time in UTC (ISO 8601 format)
      - `org_id` integer — The organization identifier, valid when enabling HIQ feature
      - `name` string — The MAC object name
      - `description` string — The MAC object description.
      - `predefined` boolean — Whether the MAC Oui is predefined
      - `value` string — The MAC octets in hexadecimal format without separators. For MAC_OUI: 6 characters (e.g., '001DA2'). For MAC_ADDRESS or MAC_RANGE: 12 characters (e.g., 'AABBCCDDEEFF').
      - `mac_type` 'MAC_OUI' | 'MAC_RANGE' | 'MAC_ADDRESS' — The MAC object type e.g, "MAC_OUI", "MAC_RANGE" or "MAC_ADDRESS"
      - `defender_defined` boolean — Whether defender is defined
      - `mac_address_end` string — The MAC address end in hexadecimal format without separators (12 characters), only available for "MAC_RANGE".
    - `destination_mac` XiqMacObject — The MAC Object.
      - `id` integer, required — The unique identifier
      - `create_time` string, date-time, required — The create time in UTC (ISO 8601 format)
      - `update_time` string, date-time, required — The last update time in UTC (ISO 8601 format)
      - `org_id` integer — The organization identifier, valid when enabling HIQ feature
      - `name` string — The MAC object name
      - `description` string — The MAC object description.
      - `predefined` boolean — Whether the MAC Oui is predefined
      - `value` string — The MAC octets in hexadecimal format without separators. For MAC_OUI: 6 characters (e.g., '001DA2'). For MAC_ADDRESS or MAC_RANGE: 12 characters (e.g., 'AABBCCDDEEFF').
      - `mac_type` 'MAC_OUI' | 'MAC_RANGE' | 'MAC_ADDRESS' — The MAC object type e.g, "MAC_OUI", "MAC_RANGE" or "MAC_ADDRESS"
      - `defender_defined` boolean — Whether defender is defined
      - `mac_address_end` string — The MAC address end in hexadecimal format without separators (12 characters), only available for "MAC_RANGE".
    - `logging_type` 'OFF' | 'DROPPED_PACKETS' | 'SESSION_INITIATION' | 'SESSION_TERMINATION' | 'BOTH' — The logging Type for MAC Firewall Rule.
  - `predefined` boolean — Flag to describe whether the application is predefined or customized.

---

[API](https://skmtc.net/extremecloudiq/apis/extremecloud-iq-api.md) · [All operations](https://skmtc.net/extremecloudiq/apis/extremecloud-iq-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/extremecloudiq/extremecloud-iq-api/versions/5ff7ab84e8e8/schema)