Dell Networking 2048, Справочное руководство

Страница: 264 / 1823

264
ACL Commands
•
fragments—
Specifies the rule matches packets that are non-initial
fragments (fragment bit asserted). Not valid for rules that match L4
information such as TCP port number since that information is carried in
the initial packet.
This keyword is visible only if the protocol is IP, TCP, or UDP.
•
log—
Specifies that this rule is to be logged.
• time-range
time-range-name
—Allows imposing time limitation on the
ACL rule as defined by the parameter time-range-name. If a time range
with the specified name does not exist and the ACL containing this ACL
rule is applied to an interface or bound to a VLAN, then the ACL rule is
applied immediately. If a time range with specified name exists and the
ACL containing this ACL rule is applied to an interface or bound to a
VLAN, then the ACL rule is applied when the time-range with specified
name becomes active. The ACL rule is removed when the time-range with
specified name becomes inactive.
• assign-queue
queue-id
—Specifies the assign-queue, which is the queue
identifier to which packets matching this rule are assigned.
•
{mirror | redirect}
unit/slot/ port
—Specifies the mirror or redirect interface
which is the unit/slot/port to which packets matching this rule are copied
or forwarded, respectively.
•
rate-limit
rate burst-size
—Specifies the allowed rate of traffic as per the
configured rate in kbps, and burst-size in kbytes.
–
Rate – the committed rate in kilobits per second
– Burst-size – the committed burst size in Kilobytes.
Default Configuration
No ACLs are configured by default.
Command Mode
Ipv4-Access-List Configuration mode
User Guidelines
Administrators are cautioned to specify permit and deny rule matches as fully
as is possible in order to avoid false matches. Rules that specify an IP port
value should also specify the protocol and and relevant IP addresses or
2CSNXXX_SWUM200.book Page 264 Tuesday, December 10, 2013 1:22 PM