Dell Force10 Podręcznik Użytkownika Pobierz pdf (Strona 150)

Usage

Information

The Dell operating system supports one ingress and one egress IP ACL per

interface.

The number of entries allowed per ACL is hardware-dependent. For detailed

specifications on entries allowed per ACL, refer to your line card documentation.

Example

Dell(conf)#ip access-list standard TestList

Dell(config-std-nacl)#

Commands

ip access-list extended — creates an extended access list.

resequence access-list — Displays the current configuration.

permit (for Standard IP ACLs)

To permit packets from a specific source IP address to leave the switch, configure a filter.

Syntax

permit {source [mask]| any | host ip-address} [count [byte]]

[dscp value] [order] [fragments] [log [interval minutes]

[threshold-in-msgs [count]] [monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command if you know the filter’s

sequence number.

• Use the no permit {source [mask] | any | host ip-address}

command.

Parameters

source Enter the IP address in dotted decimal format of the network

from which the packet was sent.

mask (OPTIONAL) Enter a network mask in /prefix format (/x) or

A.B.C.D. The mask, when specified in A.B.C.D format, may be

either contiguous or non-contiguous.

any Enter the keyword any to specify that all routes are subject

to the filter.

host ip-address Enter the keyword host then the IP address to specify a host

IP address or hostname.

count (OPTIONAL) Enter the keyword count to count packets

processed by the filter.

bytes (OPTIONAL) Enter the keyword bytes to count bytes

processed by the filter.

dscp (OPTIONAL) Enter the keyword dcsp to match to the IP

DCSCP values.

150

Access Control Lists (ACL)

1 2 ... 145 146 147 148 149 150 151 152 153 154

Brak uwag

Dell Force10 Podręcznik Użytkownika Strona 150