Dell C9000 series, Reference Manual

Page: 291 / 2286

Version Description
9.2(1.0) Introduced on the Z9500.
8.3.19.0 Introduced on the S4820T.
8.3.11.1 Introduced on the Z9000.
8.3.7.0 Introduced on the S4810.
8.3.1.0 Add the DSCP value for ACL matching.
8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
8.1.1.0 Introduced on the E-Series ExaScale.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series.
6.5.1.0 Expanded to include the optional QoS
order
priority for the
ACL entry.
Usage Information Use the
order
option only when you use policy-based QoS on the switch. For more
information, refer to the Quality of Service chapter of the C9000 Series Configuration
Guide .
When you use the
log
option, the CP processor logs detail the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may
become busy as it has to log these packets’ details.
Use the
monitor
option only when you are using flow-based monitoring. For more
information, refer to the Port Monitoring chapter of the C9000 Series Configuration
Guide .
By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The
default frequency at which ACL logs are generated is five minutes. By default, flow-
based monitoring is not enabled.
Related
Commands
deny tcp — assigns a filter to deny TCP packets.
deny udp — assigns a filter to deny UDP packets.
ip access-list extended — creates an extended ACL.
Access Control Lists (ACL) 291