Home » Dell Manuals » Servers » Dell Force10 MXL Blade » Manual Viewer

Dell Force10 MXL Blade MXL 10/40GbE Switch IO Module FTOS Command Line Referen - Page 115

Related, Commands, Syntax, Parameters, uses eight entries in the CAM

View all Dell Force10 MXL Blade manuals

Add to My Manuals
Save this manual to your list of manuals

Page 115 highlights

In the MXL Switch, you can configure either count (packets) or count (bytes). However, for an ACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at any given time. Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one entry. The range of ports is configured in the CAM based on bit mask boundaries; the space required depends on exactly what ports are included in the range. For example, an ACL rule with TCP port range 4000 - 8000 uses eight entries in the CAM: Rule# Data Mask From To #Covered 1 0000111110100000 1111111111100000 4000 4031 32 2 0000111111000000 1111111111000000 4032 4095 64 3 0001000000000000 1111100000000000 4096 6143 2048 4 0001100000000000 1111110000000000 6144 7167 1024 5 0001110000000000 1111111000000000 7168 7679 512 6 0001111000000000 1111111100000000 7680 7935 256 7 0001111100000000 1111111111000000 7936 7999 64 8 0001111101000000 1111111111111111 8000 8000 1 Total Ports: 4001 But an ACL rule with TCP port lt 1023 takes only one entry in the CAM: Rule# Data Mask From To #Covered 1 0000000000000000 1111110000000000 0 1023 1024 Total Ports: 1024 Related Commands ip access-list extended permit permit tcp Configures an extended ACL. Assigns a permit filter for IP packets. Assigns a permit filter for TCP packets. seq Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter. Syntax seq sequence-number {deny | permit} {ip-protocol-number | icmp | ip | tcp | udp} {source mask | any | host ip-address} {destination mask | any | host ip-address} [operator port [port]] [count [byte]] [dscp value] [order] [fragments] Parameters sequence-number deny permit ip-protocol-number icmp Enter a number from 0 to 4294967290. Range: 1 to 65534 Enter the keyword deny to configure a filter to drop packets meeting this condition. Enter the keyword permit to configure a filter to forward packets meeting this criteria. Enter a number from 0 to 255 to filter based on the protocol identified in the IP protocol header. Enter the keyword icmp to configure an ICMP access list filter. Access Control Lists (ACL) | 115

Section	Page
About this Guide	9
Objectives	9
Audience	9
Conventions	9
Information Symbols	10
Related Documents	10
CLI Basics	11
Accessing the Command Line	11
Multiple Configuration Users	12
Navigating the Command Line Interface	12
Obtaining Help	13
Using the Keyword no	15
Filtering show Commands	15
Displaying All Output	16
Filtering Command Output Multiple Times	16
Command Modes	16
EXEC Mode	16
EXEC Privilege Mode	17
CONFIGURATION Mode	17
INTERFACE Mode	17
LINE Mode	18
MAC ACCESS LIST Mode	18
IP ACCESS LIST Mode	18
ROUTE-MAP Mode	18
PREFIX-LIST Mode	19
SPANNING TREE Mode	19
Per-VLAN SPANNING TREE Plus Mode	19
RAPID SPANNING TREE Mode	19
MULTIPLE SPANNING TREE Mode	20
PROTOCOL GVRP Mode	20
ROUTER OSPF Mode	20
ROUTER RIP Mode	20
File Management	21
Overview	21
Basic File Management Commands	21
Control and Monitoring	37
Commands	37
Important Points to Remember	67
u-Boot	81
Overview	81
Commands	81
Access Control Lists (ACL)	91
Overview	91
Commands Common to all ACL Types	91
Common IP ACL Commands	94
Standard IP ACL Commands	98
Extended IP ACL Commands	102
Common MAC Access List Commands	117
Standard MAC ACL Commands	120
Extended MAC ACL Commands	123
IP Prefix List Commands	127
Route Map Commands	132
Bare Metal Provisioning	143
Overview	143
Commands	143
Content Addressable Memory (CAM)	147
Overview	147
CAM Profile Commands	147
Important Points to Remember	147
Data Center Bridging	153
Overview	153
DCB Command	153
PFC Commands	153
ETS Commands	154
DCBX Commands	154
Dynamic Host Configuration Protocol (DHCP)	187
Overview	187
Commands to Configure the System to be a DHCP Server	187
Commands to Configure the System to be a DHCP Client	194
Other Commands supported by DHCP Client	195
Commands to Configure Secure DHCP	198
FIP Snooping	205
Overview	205
GARP VLAN Registration (GVRP)	217
Commands	217
Important Points to Remember	218
Internet Group Management Protocol (IGMP)	227
IGMP Snooping Commands	227
Important Points to Remember for IGMP Snooping	227
Important Points to Remember for IGMP Querier	228
Interfaces	235
Overview	235
Basic Interface Commands	235
Port Channel Commands	277
Time Domain Reflectometer (TDR)	284
Important Points to Remember	284
UDP Broadcast	286
Important Points to Remember	286
IPv4 Routing	289
Commands	289
iSCSI Optimization	323
Overview	323
Link Aggregation Control Protocol (LACP)	331
Overview	331
Commands	331
Layer 2	337
Overview	337
MAC Addressing Commands	337
Virtual LAN (VLAN) Commands	347
Link Layer Discovery Protocol (LLDP)	355
Overview	355
Commands	355
LLDP-MED Commands	363
Multiple Spanning Tree Protocol (MSTP)	371
Overview	371
Commands	371
Open Shortest Path First (OSPFv2)	385
Overview	385
OSPFv2 Commands	385
Port Monitoring	433
Overview	433
Commands	433
Important Points to Remember	433
Private VLAN (PVLAN)	439
Commands	439
Private VLAN Concepts	440
Per-VLAN Spanning Tree Plus (PVST+)	449
Overview	449
Commands	449
Quality of Service (QoS)	461
Overview	461
Global Configuration Commands	461
Per-Port QoS Commands	462
Policy-Based QoS Commands	467
Routing Information Protocol (RIP)	491
Overview	491
Commands	491
Remote Monitoring (RMON)	507
Overview	507
Commands	507
Rapid Spanning Tree Protocol (RSTP)	519
Overview	519
Commands	519
Security	531
Commands	531
AAA Accounting Commands	531
Authorization and Privilege Commands	534
Authentication and Password Commands	537
RADIUS Commands	548
TACACS+ Commands	552
SSH Server and SCP Commands	555
Secure DHCP Commands	566
sFlow	571
Overview	571
Important Points to Remember	571
Commands	572
Simple Network Management Protocol (SNMP) and Syslog	579
Overview	579
SNMP Commands	579
Important Points to Remember	580
Syslog Commands	594
Storm Control	605
Overview	605
Commands	605
Important Points to Remember	605
Stacking Commands	611
Overview	611
Commands	611
Spanning Tree Protocol (STP)	621
Overview	621
System Time and Date	631
Overview	631
Commands	631
Uplink Failure Detection (UFD)	645
Overview	645
Commands	645
VLAN Stacking	655
Overview	655
Important Points to Remember	655
Virtual Router Redundancy Protocol (VRRP)	663
IPv4 VRRP Commands	663
Debugging and Diagnostics	675
Offline Diagnostic Commands	675
Important Points to Remember	675
Buffer Tuning Commands	677
Hardware Commands	682
Internet Control Message Protocol (ICMP) Message Types	695
SNMP Traps	697
Index	701

Match case Limit results 1 per page

Access Control Lists (ACL)

115

In the MXL Switch, you can configure either count (packets) or count (bytes). However, for an ACL

with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at

any given time.

Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (

range

) may require more than one entry. The range of ports is configured in the CAM based on bit

mask boundaries; the space required depends on exactly what ports are included in the range.

For example, an ACL rule with TCP port

range

4000 - 8000

uses eight entries in the CAM:

But an ACL rule with TCP port

lt 1023

takes only one entry in the CAM:

Commands

seq

Assign a sequence number to a deny or permit filter in an extended IP access list while creating the

filter.

Syntax

seq

sequence-number

{

deny

permit

}

{

ip-protocol-number

icmp | ip | tcp | udp

} {

source mask

any

host

ip-address

} {

destination mask

any

host

ip-address

} [

operator

port

[

port

]] [

count

[

byte

]] [

dscp

value

] [

order

]

[fragments]

Parameters

Rule#

Data

Mask

From

#Covered

0000111110100000 1111111111100000 4000

4031

0000111111000000 1111111111000000 4032

4095

0001000000000000 1111100000000000 4096

6143

2048

0001100000000000 1111110000000000 6144

7167

1024

0001110000000000 1111111000000000 7168

7679

512

0001111000000000 1111111100000000 7680

7935

256

0001111100000000 1111111111000000 7936

7999

0001111101000000 1111111111111111 8000

8000

Total Ports: 4001

Rule#

Data

Mask

From

#Covered

0000000000000000 1111110000000000 0

1023

1024

Total Ports: 1024

ip access-list extended

Configures an extended ACL.

permit

Assigns a permit filter for IP packets.

permit tcp

Assigns a permit filter for TCP packets.

sequence-number

Enter a number from 0 to 4294967290.

Range: 1 to 65534

deny

Enter the keyword

deny

to configure a filter to drop packets meeting this condition.

permit

Enter the keyword

permit

to configure a filter to forward packets meeting this

criteria.

ip-protocol-number

Enter a number from 0 to 255 to filter based on the protocol identified in the IP

protocol header.

icmp

Enter the keyword

icmp

to configure an ICMP access list filter.