Home » Dell Manuals » Hubs & Switches » Dell C1048P Port Extender » Manual Viewer

Dell C1048P Port Extender Networking Command-Line Reference Guide for the C900 - Page 286

Extended MAC ACL Commands, deny

Get Dell C1048P Port Extender PDF manuals and user guides

View all Dell C1048P Port Extender manuals

Add to My Manuals
Save this manual to your list of manuals

Page 286 highlights

Version 7.4.1.0 6.1.1.0 Description Added the monitor option. Introduced on the E-Series. Usage Information When you use the log option, the CP processor logs detail the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packet details. By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Use the monitor option only when you are using flow-based monitoring. For more information, refer to the Port Monitoring chapter in the C9000 Series Configuration Guide. NOTE: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. Related Commands deny - configures a filter to drop packets. permit - configures a filter to forward packets. Extended MAC ACL Commands The following commands configure Extended MAC ACLs. The C9000 supports both Ingress and Egress MAC ACLs. When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit. NOTE: For more information, also refer to the Commands Common to all ACL Types and Common MAC Access List Commands sections. deny To drop packets that match the filter criteria, configure a filter. C9000 Series Syntax Parameters deny {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype-operator] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter's sequence number. • Use the no deny {any | host mac-address | mac-source-address mac-source- address-mask} {any | host mac-address | mac-destination-address macdestination-address-mask} command. any host mac-address Enter the keyword any to drop all packets. Enter the keyword host and then enter a MAC address to drop packets with that host address. Access Control Lists (ACL) 286

Section	Page
Dell Networking Command-Line Reference Guide for the C9000 Series Version 9.10(0.1)	3
About this Guide	43
Objectives	43
Audience	43
Conventions	43
Information Icons	44
CLI Basics	45
Accessing the Command Line	45
Multiple Configuration Users	45
Obtaining Help	46
Navigating the CLI	48
Using the Keyword no Command	48
Filtering show Commands	49
Command Modes	50
Control and Monitoring	59
asf-mode	60
banner exec	61
banner login	62
banner motd	64
cam-acl	65
cam-audit linecard	67
clear alarms	68
clear line	69
configure	70
debug cpu-traffic-stats	70
debug ftpserver	71
disable	72
do	73
enable	74
enable optic-info-update interval	75
end	76
exec-timeout	77
exit	78
ftp-server enable	79
ftp-server topdir	80
ftp-server username	81
hostname	82
ip ftp password	83
ip ftp source-interface	84
ip ftp username	85
ip http source-interface	85
ip telnet server enable	86
ip telnet source-interface	87
ip tftp source-interface	88
line	89
logging coredump server	90
login concurrent-session	91
login statistics	93
ping	94
power on	97
reload	98
send	99
service timestamps	99
show alarms	101
show asf	102
show chassis	103
show command-history	105
show console lp	106
show cpu-traffic-stats	107
show cpu-interface-stats	108
show debugging	110
show environment	111
show inventory	113
show linecard	115
show login statistics	118
show memory	121
show processes cpu	122
show processes ipc	126
show processes ipc flow-control	129
show processes memory	132
show rpm	137
show software ifm	139
show system linecard	141
show tech-support	142
show util-threshold cpu	154
show util-threshold memory	155
show version	156
telnet	159
terminal length	160
traceroute	161
undebug all	163
upload trace-log	163
util-threshold cpu	164
util-threshold memory	166
virtual-ip	167
write	168
File Management	170
boot system	170
cd	171
copy	172
delete	175
dir	177
format flash	179
mkdir	179
mount nfs	180
pwd	181
rename	181
restore factory-defaults	182
rmdir	183
show boot bmp	184
show boot system	184
show bootvar	186
show file	187
show file-systems	188
show os-version	189
show running-config	193
show startup-config	196
upgrade	197
verify	200
802.1X	201
debug dot1x	202
dot1x auth-fail-vlan	203
dot1x auth-server	204
dot1x auth-type mab-only	204
dot1x authentication (Configuration)	205
dot1x authentication (Interface)	206
dot1x critical-vlan	207
dot1x guest-vlan	208
dot1x host-mode	209
dot1x mac-auth-bypass	210
dot1x max-eap-req	211
dot1x max-supplicants	212
dot1x port-control	212
dot1x profile	213
dot1x quiet-period	214
dot1x reauthentication	215
dot1x reauth-max	216
dot1x server-timeout	216
dot1x static-mab	217
dot1x supplicant-timeout	219
dot1x tx-period	219
mac	220
show dot1x cos-mapping interface	221
show dot1x interface	222
show dot1x profile	225
Access Control Lists (ACL)	226
Commands Common to all ACL Types	226
remark	227
show config	228
Common IP ACL Commands	229
clear counters ip access-group	229
ip access-group	230
ip control-plane egress-filter	231
show ip accounting access-list	232
Standard IP ACL Commands	233
deny	233
ip access-list standard	235
permit	236
resequence access-list	238
resequence prefix-list ipv4	239
seq	240
show ip access-lists	242
Extended IP ACL Commands	243
deny	243
deny icmp	245
deny tcp	248
deny udp	251
ip access-list extended	254
permit	255
permit icmp	257
permit tcp	259
permit udp	261
resequence prefix-list ipv4	264
seq	265
ACL VLAN Group Commands	268
acl-vlan-group	268
cam-acl-vlan	269
description (ACL VLAN Group)	270
ip access-group (ACL VLAN Group)	270
member vlan (ACL VLAN Group)	271
show acl-vlan-group	272
show cam-acl-vlan	273
show running config acl-vlan-group	274
Common MAC ACL Commands	275
clear counters mac access-group	275
mac control-plane egress-acl	276
mac access-group	276
show mac access-lists	278
show mac accounting access-list	279
Standard MAC ACL Commands	280
deny	280
mac access-list standard	282
permit	283
seq	284
Extended MAC ACL Commands	286
deny	286
mac access-list extended	288
permit	290
seq	292
IP Prefix List Commands	294
clear ip prefix-list	294
deny	295
ip prefix-list	296
permit	297
seq	298
show config	299
show ip prefix-list detail	300
show ip prefix-list summary	301
Route Map Commands	302
continue	302
description	303
match as-path	304
match community	305
match interface	306
match ip address	307
match ip next-hop	308
match ip route-source	309
match metric	310
match origin	311
match route-type	311
match tag	313
route-map	314
set as-path	315
set automatic-tag	316
set comm-list delete	317
set community	318
set level	319
set local-preference	320
set metric	321
set metric-type	322
set next-hop	323
set origin	324
set tag	325
set weight	326
show config	327
show route-map	327
AS-Path Commands	328
ip as-path access-list	328
show ip as-path-access-lists	329
IP Community List Commands	330
ip community-list	330
show ip community-lists	331
Bidirectional Forwarding Detection (BFD)	333
bfd all-neighbors	333
bfd disable	335
bfd enable (Configuration)	335
bfd enable (Interface)	336
bfd interval	337
bfd protocol-liveness	338
ip route bfd	338
ipv6 ospf bfd all-neighbors	339
neighbor bfd	340
neighbor bfd disable	341
show bfd neighbors	342
vrrp bfd	344
Border Gateway Protocol	346
BGP IPv4 Commands	346
address-family	346
aggregate-address	347
bgp add-path	349
bgp always-compare-med	349
bgp asnotation	350
bgp bestpath as-path ignore	351
bgp bestpath as-path multipath-relax	352
bgp bestpath med confed	353
bgp bestpath med missing-as-best	353
bgp bestpath router-id ignore	354
bgp client-to-client reflection	355
bgp cluster-id	355
bgp confederation identifier	356
bgp confederation peers	357
bgp dampening	358
bgp default local-preference	360
bgp dmzlink-bw	360
bgp enforce-first-as	361
bgp fast-external-fallover	362
bgp four-octet-as-support	363
bgp graceful-restart	364
bgp log-neighbor-changes	365
bgp non-deterministic-med	365
bgp recursive-bgp-next-hop	366
bgp regex-eval-optz-disable	367
bgp router-id	368
bgp soft-reconfig-backup	369
capture bgp-pdu neighbor	370
capture bgp-pdu max-buffer-size	371
clear ip bgp	371
clear ip bgp dampening	373
clear ip bgp flap-statistics	374
clear ip bgp peer-group	376
debug ip bgp	377
debug ip bgp dampening	378
debug ip bgp events	379
debug ip bgp keepalives	380
debug ip bgp notifications	381
debug ip bgp soft-reconfiguration	382
debug ip bgp updates	383
default-metric	384
deny bandwidth	385
description	386
distance bgp	386
maximum-paths	387
neighbor activate	388
neighbor add-path	389
neighbor advertisement-interval	390
neighbor advertisement-start	391
neighbor allowas-in	391
neighbor default-originate	392
neighbor description	393
neighbor distribute-list	394
neighbor dmzlink-bw	395
neighbor ebgp-multihop	396
neighbor fall-over	396
neighbor filter-list	397
neighbor graceful-restart	398
neighbor local-as	399
neighbor maximum-prefix	400
neighbor next-hop-self	401
neighbor password	402
neighbor peer-group (assigning peers)	403
neighbor peer-group (creating group)	404
neighbor peer-group passive	405
neighbor remote-as	406
neighbor remove-private-as	407
neighbor route-map	408
neighbor route-reflector-client	409
neighbor send-community	410
neighbor shutdown	411
neighbor soft-reconfiguration inbound	412
neighbor subnet	413
neighbor timers	414
neighbor update-source	415
neighbor weight	416
network	417
network backdoor	418
permit bandwidth	419
redistribute	419
redistribute ospf	421
router bgp	422
set extcommunity bandwidth	423
show capture bgp-pdu neighbor	423
show config	425
show ip bgp	425
show ip bgp cluster-list	427
show ip bgp community	429
show ip bgp community-list	431
show ip bgp dampened-paths	433
show ip bgp detail	434
show ip bgp extcommunity-list	436
show ip bgp filter-list	437
show ip bgp flap-statistics	439
show ip bgp inconsistent-as	441
show ip bgp neighbors	442
show ip bgp next-hop	446
show ip bgp paths	447
show ip bgp paths as-path	448
show ip bgp paths community	450
show ip bgp peer-group	451
show ip bgp regexp	453
show ip bgp summary	454
show running-config bgp	457
timers bgp	457
MBGP Commands	458
debug ip bgp dampening	459
distance bgp	460
show ip bgp dampened-paths	461
BGP Extended Communities (RFC 4360)	462
deny	462
deny regex	463
description	464
ip extcommunity-list	465
match extcommunity	465
permit	466
permit regex	467
set extcommunity rt	468
set extcommunity soo	469
show ip bgp ipv4 extcommunity-list	470
show ip bgp paths extcommunity	471
show ip extcommunity-list	472
show running-config extcommunity-list	473
IPv6 BGP Commands	474
address-family	474
address family ipv6 unicast	474
aggregate-address	475
bgp always-compare-med	476
bgp bestpath as-path ignore	477
bgp bestpath med confed	477
bgp bestpath med missing-as-best	478
bgp client-to-client reflection	478
bgp cluster-id	479
bgp confederation identifier	480
bgp dampening	480
bgp default local-preference	481
bgp enforce-first-as	482
bgp fast-external-fallover	483
bgp four-octet-as-support	483
bgp graceful-restart	484
bgp log-neighbor-changes	485
bgp non-deterministic-med	485
bgp recursive-bgp-next-hop	486
bgp regex-eval-optz-disable	486
bgp router-id	487
bgp soft-reconfig-backup	488
capture bgp-pdu max-buffer-size	489
capture bgp-pdu neighbor (ipv6)	489
clear ip bgp ipv6-address	490
clear ip bgp * (asterisk)	491
clear ip bgp as-number	492
clear ip bgp ipv6 dampening	492
clear ip bgp ipv6 flap-statistics	493
clear ip bgp ipv6 unicast	494
clear ip bgp ipv6 unicast dampening	495
clear ip bgp ipv6 unicast flap-statistics	495
debug ip bgp keepalives	496
debug ip bgp ipv6 dampening	497
debug ip bgp ipv6 unicast peer-group updates	497
debug ip bgp ipv6 unicast dampening	498
debug ip bgp ipv6 unicast updates	498
debug ip bgp notifications	499
debug ip bgp updates	500
default-metric	500
description	501
distance bgp	502
ipv6 prefix-list	502
maximum-paths	503
neighbor activate	504
neighbor advertisement-interval	504
neighbor allowas-in	505
neighbor default-originate	506
neighbor description	507
neighbor distribute-list	507
neighbor ebgp-multihop	508
neighbor fall-over	509
neighbor filter-list	510
neighbor maximum-prefix	510
neighbor next-hop-self	511
neighbor peer-group (assigning peers)	512
neighbor peer-group (creating group)	513
neighbor peer-group passive	514
neighbor remote-as	514
neighbor remove-private-as	515
neighbor route-map	516
neighbor route-reflector-client	517
neighbor send-community	518
neighbor soft-reconfiguration inbound	518
neighbor subnet	519
neighbor shutdown	520
neighbor timers	520
neighbor update-source	521
neighbor weight	522
neighbor X:X:X::X password	523
network	523
network backdoor	524
redistribute	525
redistribute ospf	526
router bgp	527
show capture bgp-pdu neighbor	527
show config	528
show ip bgp next-hop	528
show ip bgp paths	529
show ip bgp paths as-path	530
show ip bgp paths community	530
show ip bgp paths extcommunity	531
show ip bgp regexp	531
show ipv6 prefix-list	532
show ip bgp ipv6 unicast	532
show ip bgp ipv6 unicast cluster-list	533
show ip bgp ipv6 unicast community	534
show ip bgp ipv6 unicast community-list	534
show ip bgp ipv6 unicast dampened-paths	535
show ip bgp ipv6 unicast detail	535
show ip bgp ipv6 unicast extcommunity-list	536
show ip bgp ipv6 unicast filter-list	536
show ip bgp ipv6 unicast flap-statistics	537
show ip bgp ipv6 unicast inconsistent-as	538
show ip bgp ipv6 unicast neighbors	538
show ip bgp ipv6 unicast peer-group	539
show ip bgp ipv6 unicast summary	540
timers bgp	541
IPv6 MBGP Commands	541
show ipv6 mbgproutes	542
Content Addressable Memory (CAM)	543
CAM Profile Commands	543
cam-acl (Configuration)	544
cam-acl-egress	546
cam-acl-egress-pe	547
cam-acl-pe	548
cam-optimization	549
show cam-acl	550
show cam-usage	550
show cam-acl-pe	552
show cam-acl-egress-pe	553
test cam-usage	554
Unified Forwarding Table Modes	555
show hardware forwarding-table mode	555
hardware forwarding-table mode	556
Control Plane Policing (CoPP)	557
clear control-traffic protocol	557
clear control-traffic queue	558
control-plane-cpuqos	559
service-policy rate-limit-cpu-queues	560
service-policy rate-limit-protocols	560
show control-traffic protocol	561
show control-traffic queue	563
show cpu-queue rate	564
show ip protocol-queue-mapping	565
show ipv6 protocol-queue-mapping	566
show mac protocol-queue-mapping	567
show protocol-queue-mapping	568
Data Center Bridging (DCB)	572

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1,000
1,001
1,002
1,003
1,004
1,005
1,006
1,007
1,008
1,009
1,010
1,011
1,012
1,013
1,014
1,015
1,016
1,017
1,018
1,019
1,020
1,021
1,022
1,023
1,024
1,025
1,026
1,027
1,028
1,029
1,030
1,031
1,032
1,033
1,034
1,035
1,036
1,037
1,038
1,039
1,040
1,041
1,042
1,043
1,044
1,045
1,046
1,047
1,048
1,049
1,050
1,051
1,052
1,053
1,054
1,055
1,056
1,057
1,058
1,059
1,060
1,061
1,062
1,063
1,064
1,065
1,066
1,067
1,068
1,069
1,070
1,071
1,072
1,073
1,074
1,075
1,076
1,077
1,078
1,079
1,080
1,081
1,082
1,083
1,084
1,085
1,086
1,087
1,088
1,089
1,090
1,091
1,092
1,093
1,094
1,095
1,096
1,097
1,098
1,099
1,100
1,101
1,102
1,103
1,104
1,105
1,106
1,107
1,108
1,109
1,110
1,111
1,112
1,113
1,114
1,115
1,116
1,117
1,118
1,119
1,120
1,121
1,122
1,123
1,124
1,125
1,126
1,127
1,128
1,129
1,130
1,131
1,132
1,133
1,134
1,135
1,136
1,137
1,138
1,139
1,140
1,141
1,142
1,143
1,144
1,145
1,146
1,147
1,148
1,149
1,150
1,151
1,152
1,153
1,154
1,155
1,156
1,157
1,158
1,159
1,160
1,161
1,162
1,163
1,164
1,165
1,166
1,167
1,168
1,169
1,170
1,171
1,172
1,173
1,174
1,175
1,176
1,177
1,178
1,179
1,180
1,181
1,182
1,183
1,184
1,185
1,186
1,187
1,188
1,189
1,190
1,191
1,192
1,193
1,194
1,195
1,196
1,197
1,198
1,199
1,200
1,201
1,202
1,203
1,204
1,205
1,206
1,207
1,208
1,209
1,210
1,211
1,212
1,213
1,214
1,215
1,216
1,217
1,218
1,219
1,220
1,221
1,222
1,223
1,224
1,225
1,226
1,227
1,228
1,229
1,230
1,231
1,232
1,233
1,234
1,235
1,236
1,237
1,238
1,239
1,240
1,241
1,242
1,243
1,244
1,245
1,246
1,247
1,248
1,249
1,250
1,251
1,252
1,253
1,254
1,255
1,256
1,257
1,258
1,259
1,260
1,261
1,262
1,263
1,264
1,265
1,266
1,267
1,268
1,269
1,270
1,271
1,272
1,273
1,274
1,275
1,276
1,277
1,278
1,279
1,280
1,281
1,282
1,283
1,284
1,285
1,286
1,287
1,288
1,289
1,290
1,291
1,292
1,293
1,294
1,295
1,296
1,297
1,298
1,299
1,300
1,301
1,302
1,303
1,304
1,305
1,306
1,307
1,308
1,309
1,310
1,311
1,312
1,313
1,314
1,315
1,316
1,317
1,318
1,319
1,320
1,321
1,322
1,323
1,324
1,325
1,326
1,327
1,328
1,329
1,330
1,331
1,332
1,333
1,334
1,335
1,336
1,337
1,338
1,339
1,340
1,341
1,342
1,343
1,344
1,345
1,346
1,347
1,348
1,349
1,350
1,351
1,352
1,353
1,354
1,355
1,356
1,357
1,358
1,359
1,360
1,361
1,362
1,363
1,364
1,365
1,366
1,367
1,368
1,369
1,370
1,371
1,372
1,373
1,374
1,375
1,376
1,377
1,378
1,379
1,380
1,381
1,382
1,383
1,384
1,385
1,386
1,387
1,388
1,389
1,390
1,391
1,392
1,393
1,394
1,395
1,396
1,397
1,398
1,399
1,400
1,401
1,402
1,403
1,404
1,405
1,406
1,407
1,408
1,409
1,410
1,411
1,412
1,413
1,414
1,415
1,416
1,417
1,418
1,419
1,420
1,421
1,422
1,423
1,424
1,425
1,426
1,427
1,428
1,429
1,430
1,431
1,432
1,433
1,434
1,435
1,436
1,437
1,438
1,439
1,440
1,441
1,442
1,443
1,444
1,445
1,446
1,447
1,448
1,449
1,450
1,451
1,452
1,453
1,454
1,455
1,456
1,457
1,458
1,459
1,460
1,461
1,462
1,463
1,464
1,465
1,466
1,467
1,468
1,469
1,470
1,471
1,472
1,473
1,474
1,475
1,476
1,477
1,478
1,479
1,480
1,481
1,482
1,483
1,484
1,485
1,486
1,487
1,488
1,489
1,490
1,491
1,492
1,493
1,494
1,495
1,496
1,497
1,498
1,499
1,500
1,501
1,502
1,503
1,504
1,505
1,506
1,507
1,508
1,509
1,510
1,511
1,512
1,513
1,514
1,515
1,516
1,517
1,518
1,519
1,520
1,521
1,522
1,523
1,524
1,525
1,526
1,527
1,528
1,529
1,530
1,531
1,532
1,533
1,534
1,535
1,536
1,537
1,538
1,539
1,540
1,541
1,542
1,543
1,544
1,545
1,546
1,547
1,548
1,549
1,550
1,551
1,552
1,553
1,554
1,555
1,556
1,557
1,558
1,559
1,560
1,561
1,562
1,563
1,564
1,565
1,566
1,567
1,568
1,569
1,570
1,571
1,572
1,573
1,574
1,575
1,576
1,577
1,578
1,579
1,580
1,581
1,582
1,583
1,584
1,585
1,586
1,587
1,588
1,589
1,590
1,591
1,592
1,593
1,594
1,595
1,596
1,597
1,598
1,599
1,600
1,601
1,602
1,603
1,604
1,605
1,606
1,607
1,608
1,609
1,610
1,611
1,612
1,613
1,614
1,615
1,616
1,617
1,618
1,619
1,620
1,621
1,622
1,623
1,624
1,625
1,626
1,627
1,628
1,629
1,630
1,631
1,632
1,633
1,634
1,635
1,636
1,637
1,638
1,639
1,640
1,641
1,642
1,643
1,644
1,645
1,646
1,647
1,648
1,649
1,650
1,651
1,652
1,653
1,654
1,655
1,656
1,657
1,658
1,659
1,660
1,661
1,662
1,663
1,664
1,665
1,666
1,667
1,668
1,669
1,670
1,671
1,672
1,673
1,674
1,675
1,676
1,677
1,678
1,679
1,680
1,681
1,682
1,683
1,684
1,685
1,686
1,687
1,688
1,689
1,690
1,691
1,692
1,693
1,694
1,695
1,696
1,697
1,698
1,699
1,700
1,701
1,702
1,703
1,704
1,705
1,706
1,707
1,708
1,709
1,710
1,711
1,712
1,713
1,714
1,715
1,716
1,717
1,718
1,719
1,720
1,721
1,722
1,723
1,724
1,725
1,726
1,727
1,728
1,729
1,730
1,731
1,732
1,733
1,734
1,735
1,736
1,737
1,738
1,739
1,740
1,741
1,742
1,743
1,744
1,745
1,746
1,747
1,748
1,749
1,750
1,751
1,752
1,753
1,754
1,755
1,756
1,757
1,758
1,759
1,760
1,761
1,762
1,763
1,764
1,765
1,766
1,767
1,768
1,769
1,770
1,771
1,772
1,773
1,774
1,775
1,776
1,777
1,778
1,779
1,780
1,781
1,782
1,783
1,784
1,785
1,786
1,787
1,788
1,789
1,790
1,791
1,792
1,793
1,794
1,795
1,796
1,797
1,798
1,799
1,800
1,801
1,802
1,803
1,804
1,805
1,806
1,807
1,808
1,809
1,810
1,811
1,812
1,813
1,814
1,815
1,816
1,817
1,818
1,819
1,820
1,821
1,822
1,823
1,824
1,825
1,826
1,827
1,828
1,829
1,830
1,831
1,832
1,833
1,834
1,835
1,836
1,837
1,838
1,839
1,840
1,841
1,842
1,843
1,844
1,845
1,846
1,847
1,848
1,849
1,850
1,851
1,852
1,853
1,854
1,855
1,856
1,857
1,858
1,859
1,860
1,861
1,862
1,863
1,864
1,865
1,866
1,867
1,868
1,869
1,870
1,871
1,872
1,873
1,874
1,875
1,876
1,877
1,878
1,879
1,880
1,881
1,882
1,883
1,884
1,885
1,886
1,887
1,888
1,889
1,890
1,891
1,892
1,893
1,894
1,895
1,896
1,897
1,898
1,899
1,900
1,901
1,902
1,903
1,904
1,905
1,906
1,907
1,908
1,909
1,910
1,911
1,912
1,913
1,914
1,915
1,916

Match case Limit results 1 per page

Version

Description

7.4.1.0

Added the

monitor

option.

6.1.1.0

Introduced on the E-Series.

Usage Information

When you use the

log

option, the CP processor logs detail the packets that match. Depending on how

many packets match the log entry and at what rate, the CP may become busy as it has to log these

packet details.

By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency

at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.

Use the

monitor

option only when you are using flow-based monitoring. For more information, refer to

the Port Monitoring chapter in the

C9000 Series Configuration Guide

NOTE:

When ACL logging and byte counters are configured simultaneously, byte counters may

display an incorrect value. Configure packet counters with logging instead.

Commands

deny

— configures a filter to drop packets.

permit

— configures a filter to forward packets.

Extended MAC ACL Commands

The following commands configure Extended MAC ACLs. The C9000 supports both Ingress and Egress MAC ACLs.

When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit.

NOTE:

For more information, also refer to the

Commands Common to all ACL Types

and

Common MAC Access List

Commands

sections.

deny

To drop packets that match the filter criteria, configure a filter.

C9000 Series

Syntax

deny {any | host

mac-address

mac-source-address mac-source-address-mask

} {any

| host

mac-address

mac-destination-address mac-destination-address-mask

}

[

ethertype-operator

] [count [byte]] [log [interval

minutes

] [threshold-in-msgs

[

count

]] [monitor]

To remove this filter, you have two choices:

•

Use the

no seq

sequence-number

command if you know the filter’s sequence number.

•

Use the

no deny {any | host

mac-address

mac-source-address mac-source-

address-mask

} {any |

host mac-address

mac-destination-address mac-

destination-address-mask

}

command.

Parameters

any

Enter the keyword

any

to drop all packets.

host

mac-address

Enter the keyword

host

and then enter a MAC address to drop packets with that

host address.

Access Control Lists (ACL)

286