Version
Description
8.3.10.0
Introduced on the S4810.
8.1.1.0
Introduced on the E-Series ExaScale.
7.8.1.0
Increased the name string to accept up to 140 characters.
Prior to 7.8.1.0, names were up to 16 characters long.
7.6.1.0
Introduced on the S-Series.
7.5.1.0
Introduced on the C-Series.
6.2.1.1
Introduced on the E-Series.
Usage
Information
The number of entries allowed per ACL is hardware-dependent. For detailed
information on the number entries allowed per ACL on the Z9500, refer to the
Content Addressable Memory (CAM) chapter in the
Z9500 Configuration Guide
.
If you configure an extended IP ACL to be used only to filter protocol traffic for
CoPP, you must enter the keyword
cpu-qos
.
Example
Dell(conf)#ip access-list extended TESTListEXTEND
Dell(config-ext-nacl)#
Related
Commands
ip access-list standard
— configures a standard IP access list.
show config
— displays the current configuration.
permit
To pass IP packets meeting the filter criteria, configure a filter.
Z9500
Syntax
permit {
source mask
| any | host
ip-address
} {
destination mask
| any | host
ip-address
} [count [bytes]] [dscp
value
] [order]
[fragments] [log [interval
minutes
] [threshold-in-msgs [
count
]]
[monitor]
To remove this filter, you have two choices:
• Use the
no seq
sequence-number
command if you know the filter’s
sequence number.
• Use the
no deny {
source mask
| any | host
ip-address
}
{
destination mask
| any | host
ip-address
}
command.
Parameters
source
Enter the IP address in dotted decimal format of the network
from which the packet was sent.
mask
(OPTIONAL) Enter a network mask in /prefix format (/x) or
A.B.C.D. The mask, when specified in A.B.C.D format, may be
either contiguous or non-contiguous.
Access Control Lists (ACL)
247
