Dell C9000 series, Reference Manual

Page: 287 / 2286

Usage Information Use the
order
option only when you use policy-based QoS on the switch. For more
information, refer to the Quality of Service chapter of the C9000 Series Configuration
Guide . The following conditions apply:
• The
seq sequence-number
command is applicable only in an ACL group.
• The
order
option works across ACL groups that have been applied on an
interface via the QoS policy framework.
• The
order
option takes precedence over
seq sequence-number
.
• If
sequence-number
is not configured, the rules with the same order value are
ordered according to their configuration order.
• If
sequence-number
is configured, the sequence-number is used as a tie breaker
for rules with the same order.
When you use the
log
option, the CP processor logs detail the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may
become busy as it has to log these packets’ details.
By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The
default frequency at which ACL logs are generated is five minutes. By default, flow-
based monitoring is not enabled.
Use the
monitor
option only when you are using flow-based monitoring. For more
information, refer to the Port Monitoring chapter of the C9000 Series Configuration
Guide .
Related
Commands
deny — configures a filter to drop packets.
permit — configures a filter to forward packets.
show ip access-lists
Display inbound or outbound IP access-list information based on a given option.
C9000 Series
Syntax
show ip access-lists {interface interface [in | out]}
Parameters
interface Enter the keyword
interface
then one of the following
keywords and slot/port or pe-id / stack-unit / port-id
information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet
then the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet
then the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword
fortyGigE
then the slot/port information.
Access Control Lists (ACL) 287