Prior to Dell Networking OS version 7.8.1.0, names are up to 16 characters long.
The number of entries allowed per ACL is hardware-dependent. For detailed specifications on entries allowed per
ACL, refer to your line card documentation.
Example
Dell(conf)# ip access-list standard TestList
Dell(config-std-nacl)#
Related Commands
•
— create an extended access list.
•
— display the current configuration.
permit
To permit packets from a specific source IP address to leave the switch, configure a filter.
Syntax
permit {
source
[
mask
]| any | host
ip-address
} [count [bytes] | log] [dscp
value
] [ecn
value
] [fragments] [monitor [
session-ID
]] [no-drop] [order]
To remove this filter, you have two choices:
•
Use the
no seq
sequence-number
command if you know the filter’s sequence number.
•
Use the
no permit {
source
[
mask
] | any | host
ip-address
}
command.
Parameters
source
Enter the IP address in dotted decimal format of the network from which the packet was
sent.
mask
(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.
any
Enter the keyword
any
to specify that all routes are subject to the filter.
host
ip-address
Enter the keyword
host
then the IP address to specify a host IP address or hostname.
count
(OPTIONAL) Enter the keyword
count
to count the packets.
bytes
(OPTIONAL) Enter the keyword
bytes
to count the bytes.
log
(OPTIONAL) Enter the keyword
log
to enter ACL matches in the log.
dscp
(OPTIONAL) Enter the keyword
dcsp
to match the IP DSCP values. The range is from 0
to 63.
ecn
(OPTIONAL) Enter the keyword
ecn
to match the ECN bits. The range is from 0 to 3.
order
(OPTIONAL) Enter the keyword
order
to specify the QoS order for the ACL entry. The
range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order
numbers have a higher priority). If you do not use the keyword
order
, the ACLs have the
lowest order by default (255).
monitor
(OPTIONAL) Enter the keyword
monitor
then the session–ID to describe the traffic
that you want to monitor and the ACL in which you are creating the rule is applied to the
monitored interface. The session–ID range is from 0 to 65535.
NOTE:
For more information, see “Flow-based Monitoring” in the Port
Monitoring section of the
Dell Networking OS Configuration Guide
.
fragments
Enter the keyword
fragments
to use ACLs to control packet fragments.
194
Access Control Lists (ACL)
Содержание S6100
Страница 1: ...Dell Command Line Reference Guide for the S6100 ON System 9 11 2 0P1 ...
Страница 474: ...protocol list ttl0 ttl1 Dell 474 Control Plane Policing CoPP ...
Страница 979: ... show lldp neighbors display the LLDP neighbors Link Layer Discovery Protocol LLDP 979 ...
Страница 1627: ... uplink state group creates an uplink state group and enables the tracking of upstream links Uplink Failure Detection UFD 1627 ...
