Dell Force10 S4810P, Справочное руководство

Страница: 275 / 1637

in the CAM based on bit mask boundaries; the space required depends on exactly what ports
are included in the range.
Example
An ACL rule with a TCP port range of 4000–8000 uses eight entries in the CAM.
Rule# Data Mask From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32
2 0000111111000000 1111111111000000 4032 4095 64
3 0001000000000000 1111100000000000 4096 6143 2048
4 0001100000000000 1111110000000000 6144 7167 1024
5 0001110000000000 1111111000000000 7168 7679 512
6 0001111000000000 1111111100000000 7680 7935 256
7 0001111100000000 1111111111000000 7936 7999 64
8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
Example
An ACL rule with a TCP port lt 1023 uses only one entry in the CAM.
Rule# Data Mask From To #Covered
1 0000000000000000 1111110000000000 0 1023 1024
Total Ports: 1024
Related
Commands
ip access-list extended – creates an extended ACL.
permit – assigns a permit filter for IP packets.
permit tcp – assigns a permit filter for TCP packets.
resequence access-list
Re-assign sequence numbers to entries of an existing access-list.
C-Series, E-Series, S-Series, Z-Series
Syntax resequence access-list {ipv4 | mac} { access-list-name
StartingSeqNum Step-to-Increment }
Parameters
ipv4 | mac Enter the keyword
ipv4
or
mac
to identify the access list type to
resequence.
access-list-name
Enter the name of a configured IP access list, up to 140 characters.
StartingSeqNum
Enter the starting sequence number to resequence. The range is 0 to
4294967290.
Step-to-
Increment
Enter the step to increment the sequence number. The range is 1 to
4294967290.
Defaults none
Command Modes
• EXEC
• EXEC Privilege
275