Dell Force10 E300, Configuration Manual, Page: 944 / 1262

944 | Security
www.dell.com | support.dell.com
To create a filter for UDP packets with a specified sequence number, use these commands in the following
sequence, starting in the CONFIGURATION mode:
When you create the filters with a specific sequence number, you can create the filters in any order and the
filters are placed in the correct order.
Figure 45-13 illustrates how the
seq
command orders the filters according to the sequence number
assigned. In the example, filter 15 was configured before filter 5, but the
show config
command displays
the filters in the correct order.
2
seq
sequence-number {
deny
|
permit
}
tcp
{
source mask
|
any
|
host
ip-address
}
[
operator port
[
port
]] {
destination mask
|
any
|
host
ip-address
} [
operator port
[
port
]] [
established
] [
count
[
byte
] |
log
]
TRACE LIST Configure a trace list filter for TCP
packets.
• source : An IP address as the source IP
address for the filter to match.
• mask: a network mask
•
any
: to match any IP source address
•
host
ip-address: to match IP addresses
in a host.
• destination : An IP address as the source
IP address for the filter to match.
•
count:
count packets processed by the
filter.
•
byte:
count bytes processed by the
filter.
•
log:
is supported.
Step Command Syntax Command Mode Purpose
1
ip trace-list
access-list-name
CONFIGURATION Create a trace list and assign it a unique
name.
2
seq
sequence-number {
deny
|
permit
}
udp
{
source mask
|
any
|
host
ip-address
}
[
operator port
[
port
]] {
destination mask
|
any
|
host
ip-address
} [
operator port
[
port
]] [
count
[
byte
] |
log
]
TRACE LIST Configure a trace list filter for UDP
packets.
• source : An IP address as the source IP
address for the filter to match.
• mask: a network mask
•
any
: to match any IP source address
•
host
ip-address: to match IP addresses
in a host.
• destination : An IP address as the source
IP address for the filter to match.
•
count:
count packets processed by the
filter.
•
byte:
count bytes processed by the
filter.
•
log:
is supported.
Note: When assigning sequence numbers to filters, keep in mind that you might need to insert a
new filter. To prevent reconfiguring multiple filters, assign sequence numbers in multiples of five or
another number.
Step Command Syntax Command Mode Purpose