Dell S6100, Руководство по настройке

Страница: 224 / 1743

• If you configure
sequence-number
, the sequence-number is used as a tie breaker for rules with the same
order.
When you use the log option, the CP processor logs details about the packets that match. Depending on how
many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’
details.
If you configure the
sequence-number
, the
sequence-number
is used as a tie breaker for rules with the
same order.
NOTE: When you configure ACL logging and byte counters simultaneously, byte counters may display
an incorrect value. Configure packet counters with logging instead.
Related Commands
• deny — configure a filter to drop packets.
• permit — configure a filter to forward packets.
Extended IPv6 ACL Commands
The following commands configure extended IPv6 ACLs.
deny
Configure a filter that drops IPv6 packets that match the filter criteria.
Syntax deny { ipv6-protocol-number | icmp | ipv6 | tcp | udp}
To remove this filter, you have two choices:
• Use the
no seq sequence-number
command syntax if you know the filter’s sequence number
• Use the
no deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp}
command
Parameters
ip-protocol-number Enter an IPv6 protocol number. The range is 0 to 255.
icmp Enter the keyword
icmp
to deny Internet Control Message Protocol version 6.
ipv6 Enter the keyword
ipv6
to deny any Internet Protocol version 6.
tcp Enter the keyword
tcp
to deny the Transmission Control protocol.
udp Enter the keyword
udp
to deny the User Datagram Protocol.
Defaults Not configured.
Command Modes ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking
OS Command Line Reference Guide .
Version Description
9.10(0.0) Introduced on the S6100–ON.
9.8(1.0) Introduced on the Z9100–ON.
9.0.2.0 Introduced on the S6000.
224 Access Control Lists (ACL)