dscp
Enter the keyword
dscp
to deny a packet based on the DSCP
value. The range is from 0 to 63.
operator
(OPTIONAL) Enter one of the following logical operand:
•
eq
= equal to
•
neq
= not equal to
•
gt
= greater than
•
lt
= less than
•
range
= inclusive range of ports (you must specify two
ports for the
port
parameter)
port port
Enter the application layer port number. Enter two port numbers
if you are using the
range
logical operand. The range is 0 to
65535.
destination
Enter the IP address of the network or host to which the packets
are sent.
count
(OPTIONAL) Enter the keyword
count
to count packets
processed by the filter.
bytes
(OPTIONAL) Enter the keyword
bytes
to count bytes processed
by the filter.
order
(OPTIONAL) Enter the keyword
order
to specify the QoS
priority for the ACL entry. The range is from 0 to 254 (where 0 is
the highest priority and 254 is the lowest; lower-order numbers
have a higher priority). If you do not use the keyword
order
, the
ACLs have the lowest order by default (255).
fragments
Enter the keyword
fragments
to use ACLs to control packet
fragments.
log
(OPTIONAL) Enter the keyword
log
to include ACL matches in
the log.
threshold-in msgs
count
(OPTIONAL) Enter the
threshold-in-msgs
keyword followed
by a value to indicate the maximum number of ACL logs that
can be generated, exceeding which the generation of ACL logs
is terminated with the
seq
,
permit
, or
deny
commands. The
threshold range is from 1 to 100.
interval
minutes
(OPTIONAL) Enter the keyword
interval
followed by the time
period in minutes at which ACL logs must be generated. The
threshold range is from 1 to 10 minutes.
monitor
(OPTIONAL) Enter the keyword
monitor
when the rule is
describing the traffic that you want to monitor and the ACL in
which you are creating the rule is applied to the monitored
interface. For more information, refer to the “Flow-based
Monitoring” section in the Port Monitoring chapter of the
Dell
Networking OS Configuration Guide
.
Access Control Lists (ACL)
313
Summary of Contents for C9000 series
Page 1: ...Dell Networking Command Line Reference Guide for the C9000 Series Version 9 10 0 0 ...
Page 394: ...deny 14551 666 Dell Access Control Lists ACL 394 ...
Page 877: ...algorithm FIPS Cryptography 877 ...
Page 1297: ...Total 5 0 Total 5 active route s using 952 bytes IPv6 Basics 1297 ...