Dell C9000 series, Справочное руководство

Страница: 306 / 2286

Usage Information Use the
order
option only when you use policy-based QoS on the switch. For more
information, refer to the Quality of Service chapter of the C9000 Series Configuration
Guide .
When you use the
log
option, the CP processor logs detail the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may
become busy as it has to log these packets’ details.
Use the
monitor
option only when you are using flow-based monitoring. For more
information, refer to the Port Monitoring chapter of the C9000 Series Configuration
Guide .
By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The
default frequency at which ACL logs are generated is five minutes. By default, flow-
based monitoring is not enabled.
The software cannot count both packets and bytes; when you enter the count byte
options, only bytes are incremented.
Related
Commands
ip access-list extended — creates an extended ACL.
permit tcp — assigns a permit filter for TCP packets.
permit udp — assigns a permit filter for UDP packets.
permit icmp
Configure a filter to allow all or specific ICMP messages.
C9000 Series
Syntax
permit icmp { source mask | any | host ip-address } { destination
mask | any | host ip-address } [dscp] [count [bytes]] [order]
[fragments] [log [interval minutes ] [threshold-in-msgs [count]]
[monitor]
To remove this filter, you have two choices:
• Use the
no seq sequence-number
command if you know the filter’s sequence
number.
• Use the
no permit icmp { source mask | any | host ip-address }
{ destination mask | any | host ip-address }
command.
Parameters
source Enter the IP address of the network or host from which the
packets were sent.
Access Control Lists (ACL) 306