Dell S6100, Руководство по настройке

Страница: 235 / 1743

Version Description
9.10(0.0) Introduced on the S6100–ON.
9.8(1.0) Introduced on the Z9100–ON.
9.0.2.0 Introduced on the S6000.
8.4.2.1 Introduced on the S-Series.
8.2.1.0 Introduced on the E-Series ExaScale.
7.8.1.0 Introduced on the C-Series.
7.4.1.0 Introduced on the E-Series TeraScale. Added the
monitor
option.
Usage Information
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (
gt
,
lt
,
range
)
may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the
space required depends on exactly what ports are included in the range.
Example
An ACL rule with a TCP port range 4000 - 8000 uses eight entries in the CAM:
Rule# Data Mask From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32
2 0000111111000000 1111111111000000 4032 4095 64
3 0001000000000000 1111100000000000 4096 6143 2048
4 0001100000000000 1111110000000000 6144 7167 1024
5 0001110000000000 1111111000000000 7168 7679 512
6 0001111000000000 1111111100000000 7680 7935 256
7 0001111100000000 1111111111000000 7936 7999 64
8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
Example
An ACL rule with a TCP port
lt 1023
takes only one entry in the CAM:
Rule# Data Mask From To #Covered
1 0000000000000000 1111110000000000 0 1023 1024
Total Ports: 1024
Related Commands
permit – assigns a permit filter for IP packets.
permit tcp – assigns a permit filter for TCP packets.
resequence access-list
Re-assign sequence numbers to entries of an existing access-list.
S-Series
Syntax resequence access-list {ipv4 | ipv6 | mac} { access-list-name StartingSeqNum
Step-to-Increment }
Access Control Lists (ACL) 235