Dell Networking S4810, Reference Manual

Page: 217 / 1761

Version 7.4.1.0 Added support for the non-contiguous mask and added the
monitor
option.
Version 6.5.1.0 Expanded to include the optional QoS
order
priority for the
ACL entry.
Usage
Information
Dell Networking OS supports one ingress and one egress IP ACL per interface.
Prior to Dell Networking OS version 7.8.1.0, names are up to 16 characters long.
The number of entries allowed per ACL is hardware-dependent. For detailed
specifications on entries allowed per ACL, refer to your line card documentation.
Example
Dell(conf)#ip access-list standard TestList
Dell(config-std-nacl)#
Related
Commands
ip access-list extended — creates an extended access list.
show config — displays the current configuration.
permit
To permit packets from a specific source IP address to leave the switch, configure a filter.
S4810
Syntax
permit { source [ mask ]| any | host ip-address }
To remove this filter, you have two choices:
• Use the
no seq sequence-number
command if you know the filter’s
sequence number.
• Use the
no permit { source [ mask ] | any | host ip-address }
command.
Parameters
source Enter the IP address in dotted decimal format of the network
from which the packet was sent.
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or
A.B.C.D. The mask, when specified in A.B.C.D format, may be
either contiguous or non-contiguous.
any Enter the keyword
any
to specify that all routes are subject
to the filter. You can enter any of the following keywords to
specify route types.
•
bytes
— Enter the keyword
bytes
to count bytes
processed by the filter.
•
count
— Enter the keyword
count
to count packets the
filter processes.
•
dscp
— Enter the keyword
dcsp
to match to the IP
DCSCP values.
Access Control Lists (ACL)
217