Dell C1048P Port Extender Networking Command-Line Reference Guide for the C900 - Page 268

Defaults None Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.9(0.0) Description Introduced on the C9010. Usage Information If you do not attach an ingress or egress access-list to an interface, no information displays and you return to the DELL# prompt. Example Dell# show ip access-lists out Standard Egress IP access list first seq 5 permit any count bytes (0 bytes) seq 10 deny any count (0 packets) Standard Egress IP access list five seq 5 permit any Standard Egress IP access list four seq 5 permit any count bytes (0 bytes) seq 10 deny any count (0 packets) Standard Egress IP access list second seq 5 permit host 1.1.1.1 count bytes (0 bytes) Extended Egress IP access list ten seq 5 permit tcp any eq 1 any seq 10 deny ip any host 11.11.11.11 count (0 packets) Extended IP ACL Commands The following commands configure extended IP ACLs, which in addition to the IP address, also examine the packet's protocol type. The C9000 supports both Ingress and Egress IP ACLs. When an ACL is created without any rule and then applied to an interface, ACL behavior reflects an implicit permit. NOTE: Also refer to the Commands Common to all ACL Types and Common IP ACL Commands sections. deny Configure a filter that drops IP packets meeting the filter criteria. C9000 Series Syntax deny {ip | ip-protocol-number} {source mask | any | host ipaddress} {destination mask | any | host ip-address} [count 268 Access Control Lists (ACL)