Home » Dell Manuals » Servers » Dell Force10 S4810P » Manual Viewer

Dell Force10 S4810P FTOS Command Line Reference Guide for the S4810 System FTO - Page 287

Standard MAC ACL Commands, deny

View all Dell Force10 S4810P manuals

Add to My Manuals
Save this manual to your list of manuals

Page 287 highlights

Usage Information Example The ACL hit counters in this command increment the counters for each matching rule, not just the first matching rule. FTOS#show mac accounting access-list mac-ext interface po 1 Extended mac access-list mac-ext on GigabitEthernet 0/11 seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19 count (393794576 packets) seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29 count (89076777 packets) seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39 count (0 packets) seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49 count (0 packets) seq 25 permit any any count (0 packets) Extended mac access-list mac-ext on GigabitEthernet 0/12 seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19 count (57589834 packets) seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29 count (393143077 packets) seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39 count (0 packets) seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49 count (0 packets) seq 25 permit any any count (0 packets) FTOS# Standard MAC ACL Commands When you create an access control list without any rule and then apply it to an interface, the ACL behavior reflects implicit permit. These commands configure standard MAC ACLs. The C-Series and S-Series platforms (except the S4810 system) support Ingress MAC ACLs only. The S4810 and Z9000 support both Ingress and Egress MAC ACLs. NOTE: For more information, also refer to the Commands Common to all ACL Types and Common MAC Access List Commands sections. deny Configure a filter to drop packets with a the MAC address specified. C-Series, E-Series, S-Series, Z-Series Syntax deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter's sequence number. • Use the no deny {any | mac-source-address mac-sourceaddress-mask} command. 287

Section	Page
FTOS Command Line Reference Guide for the S4810 System FTOS 9.1.(0.0)	3
About this Guide	49
Objectives	49
Audience	49
Conventions	49
Information Icons	50
CLI Basics	51
Accessing the Command Line	51
Multiple Configuration Users	51
Obtaining Help	52
Navigating the CLI	53
Using the Keyword no Command	54
Filtering show Commands	54
Command Modes	55
Determining Chassis Mode	61
File Management	63
boot config	63
boot host	65
boot network	65
boot system (S4810 and Z9000)	66
boot system gateway	67
cd	67
change bootflash-image	68
copy	69
copy (Streamline Upgrade)	71
copy running-config startup-config	72
delete	72
dir	73
download alt-boot-image	74
download alt-full-image	74
download alt-system-image	75
format (C-Series and E-Series)	75
format flash (S-Series)	76
format flash (Z9000)	77
fsck flash (S-Series and Z-Series)	77
pwd	78
rename	78
show boot system	79
show bootvar	80
show file	81
show file-systems	82
show linecard	83
show os-version	84
show running-config	85
show sfm	89
show startup-config	90
Object Missing	93
upgrade (C-Series version)	93
upgrade (E-Series version)	94
upgrade (S-Series management unit and Z-Series)	96
upgrade fpga-image	98
restore fpga-image	99
upgrade fpga-image	100
Control and Monitoring	103
asf-mode	103
audible cut-off	104
banner exec	104
banner login	105
banner motd	106
cam-acl	107
cam-acl-vlan	108
cam-audit linecard	109
clear alarms	109
clear command history	110
clear line	110
configure	111
debug cpu-traffic-stats	112
debug ftpserver	112
disable	113
do	113
enable	114
enable optic-info-update interval	115
enable xfp-power-updates	115
end	116
epoch	117
exec-banner	118
exec-timeout	119
exit	119
ftp-server enable	120
ftp-server topdir	121
ftp-server username	122
hostname	123
ip ftp password	123
ip ftp source-interface	124
ip ftp username	125
ip telnet server enable	126
ip telnet source-interface	126
ip tftp source-interface	127
line	128
linecard	129
linecard (4-port 40G line card)	131
module power-off	132
motd-banner	133
ping	133
power-off	137
power-on	137
reload	138
reset	139
rpm <slot> location-led	140
send	140
service timestamps	141
show alarms	142
show cam-acl-vlan	143
show chassis	143
show command-history	145
show command-tree	146
show console lp	147
show cpu-traffic-stats	148
show debugging	149
show environment (C-Series and E-Series)	150
show environment (S-Series)	152
show inventory (C-Series and E-Series)	154
show inventory (S-Series and Z-Series)	156
show linecard	158
show linecard boot-information	160
show memory (C-Series and E-Series)	162
show memory (S-Series)	163
show processes cpu (C-Series and E-Series)	164
show processes cpu (S-Series)	166
show processes ipc flow-control	170
show processes memory (C-Series and E-Series)	173
show processes memory (S-Series)	176
show processes switch-utilization	178
show rpm	179
show software ifm	182
show switch links	183
show system (S-Series and Z-Series)	184
show tech-support (C-Series and E-Series)	187
show tech-support (S-Series and Z-Series)	190
ssh-peer-rpm	192
ssh-peer-stack-unit	193
telnet	193
telnet-peer-stack-unit	195
terminal length	195
terminal xml	196
traceroute	197
undebug all	199
upload trace-log	199
virtual-ip	200
write	201
802.1ag	203
ccm disable	203
ccm transmit-interval	203
clear ethernet cfm traceroute-cache	204
database hold-time	204
disable	204
domain	205
ethernet cfm	205
ethernet cfm mep	206
ethernet cfm mip	206
mep cross-check	207
mep cross-check enable	207
mep cross-check start-delay	208
ping ethernet	208
show ethernet cfm domain	209
show ethernet cfm maintenance-points local	209
show ethernet cfm maintenance-points remote	210
show ethernet cfm mipbd	211
show ethernet cfm statistics	211
show ethernet cfm port-statistics	212
show ethernet cfm traceroute-cache	213
service	213
traceroute cache hold-time	214
traceroute cache size	214
traceroute ethernet	215
802.1X	217
debug dot1x	218
dot1x auth-fail-vlan	218
dot1x auth-server	219
dot1x auth-type mab-only	219
dot1x authentication (Configuration)	220
dot1x authentication (Interface)	221
dot1x guest-vlan	221
dot1x host-mode	222
dot1x mac-auth-bypass	223
dot1x max-eap-req	223
dot1x max-supplicants	224
dot1x port-control	224
dot1x quiet-period	225
dot1x reauthentication	225
dot1x reauth-max	226
dot1x server-timeout	226
dot1x supplicant-timeout	227
dot1x tx-period	228
show dot1x cos-mapping interface	228
show dot1x interface	229
Access Control Lists (ACL)	233
Commands Common to all ACL Types	233
remark	233
show config	234
Common IP ACL Commands	235
access-class	235
clear counters ip access-group	236
ip access-group	236
ip control-plane egress-filter	237
show ip accounting access-list	238
Standard IP ACL Commands	239
deny	239
ip access-list standard	241
permit	242
resequence access-list	244
resequence prefix-list ipv4	245
seq	245
Extended IP ACL Commands	247
deny	248
deny arp	250
deny ether-type	251
deny icmp	253
deny tcp	256
deny udp	259
ip access-list extended	262
permit	263
permit arp	265
permit ether-type	266
permit icmp	268
permit tcp	270
permit udp	273
resequence access-list	275
resequence prefix-list ipv4	276
seq arp	277
seq ether-type	279
seq	281
Common MAC Access List Commands	283
clear counters mac access-group	284
mac access-group	284
show mac access-lists	285
show mac accounting access-list	286
Standard MAC ACL Commands	287
deny	287
mac access-list standard	289
permit	290
seq	291
Extended MAC ACL Commands	292
deny	292
mac access-list extended	294
permit	295
seq	297
IP Prefix List Commands	298
clear ip prefix-list	299
deny	299
ip prefix-list	300
permit	301
seq	301
show config	302
show ip prefix-list detail	303
show ip prefix-list summary	304
Route Map Commands	305
continue	305
description	306
match as-path	306
match community	307
match interface	308
match ip address	309
match ip next-hop	309
match ip route-source	310
match metric	311
match origin	312
match route-type	312
match tag	313
route-map	314
set as-path	315
set automatic-tag	316
set comm-list delete	316
set community	317
set level	318
set local-preference	319
set metric	320
set metric-type	320
set next-hop	321
set origin	322
set tag	323
set weight	323
show config	324
show route-map	324
AS-Path Commands	325
deny	325
ip as-path access-list	326
permit	327
show config	328
show ip as-path-access-lists	328
IP Community List Commands	329
deny	329
ip community-list	330
permit	331
show config	332
show ip community-lists	332
Bidirectional Forwarding Detection (BFD)	335
bfd all-neighbors	335
bfd disable	336
bfd enable (Configuration)	337
bfd enable (Interface)	337
bfd interval	338
bfd neighbor	339
bfd protocol-liveness	339
clear bfd counters	340
debug bfd	341
ip route bfd	342
isis bfd all-neighbors	343
neighbor bfd	344
neighbor bfd disable	345
show bfd counters	346
show bfd neighbors	347
vrrp bfd	349
Border Gateway Protocol	351
BGP IPv4 Commands	351
address-family	352
aggregate-address	352
bgp add-path	353
bgp always-compare-med	354
bgp asnotation	354
bgp bestpath as-path ignore	355
bgp bestpath as-path multipath-relax	356
bgp bestpath med confed	356
bgp bestpath med missing-as-best	357
bgp bestpath router-id ignore	357
bgp client-to-client reflection	358
bgp cluster-id	358
bgp confederation identifier	359
bgp confederation peers	360
bgp dampening	361
bgp default local-preference	362
bgp enforce-first-as	362
bgp fast-external-fallover	363
bgp four-octet-as-support	363
bgp graceful-restart	364
bgp log-neighbor-changes	365
bgp non-deterministic-med	365
bgp recursive-bgp-next-hop	366
bgp regex-eval-optz-disable	366
bgp router-id	367
bgp soft-reconfig-backup	368
capture bgp-pdu neighbor	369
capture bgp-pdu max-buffer-size	369
clear ip bgp	370
clear ip bgp dampening	371
clear ip bgp flap-statistics	372
clear ip bgp peer-group	373
debug ip bgp	373
debug ip bgp dampening	374
debug ip bgp events	375
debug ip bgp keepalives	375
debug ip bgp notifications	376
debug ip bgp soft-reconfiguration	377
debug ip bgp updates	377
default-metric	378
description	379
distance bgp	379
max-paths	380
neighbor activate	381
neighbor add-path	381
neighbor advertisement-interval	382
neighbor advertisement-start	383
neighbor allowas-in	383
neighbor default-originate	384
neighbor description	384
neighbor distribute-list	385
neighbor ebgp-multihop	386
neighbor fall-over	386
neighbor filter-list	387
neighbor graceful-restart	388
neighbor local-as	389
neighbor maximum-prefix	389
neighbor next-hop-self (C-, E-, and S-Series)	390
neighbor password	391
neighbor peer-group (assigning peers)	392
neighbor peer-group (creating group)	393
neighbor peer-group passive	394
neighbor remote-as	394
neighbor remove-private-as	395
neighbor route-map	396
neighbor route-reflector-client	397
neighbor send-community	397
neighbor shutdown	398
neighbor soft-reconfiguration inbound	399
neighbor subnet	400
neighbor timers	400
neighbor update-source	401
neighbor weight	402
network	402
network backdoor	403
redistribute	404
redistribute isis	405
redistribute ospf	406
router bgp	407
show capture bgp-pdu neighbor	408
show config	409
show ip bgp	409
show ip bgp cluster-list	411
show ip bgp community	412
show ip bgp community-list	414
show ip bgp dampened-paths	416
show ip bgp detail	416
show ip bgp extcommunity-list	418
show ip bgp filter-list	419
show ip bgp flap-statistics	420
show ip bgp inconsistent-as	422
show ip bgp neighbors	423
show ip bgp next-hop	428
show ip bgp paths	429
show ip bgp paths as-path	430
show ip bgp paths community	431
show ip bgp peer-group	432
show ip bgp regexp	434
show ip bgp summary	436
show running-config bgp	438
timers bgp	439
MBGP Commands	439
address family ipv4 multicast (MBGP)	440
aggregate-address	440
bgp dampening	441
clear ip bgp ipv4 multicast	442
clear ip bgp dampening	442
clear ip bgp flap-statistics	443
debug ip bgp dampening	444
debug ip bgp peer-group updates	444
debug ip bgp updates	445
distance bgp	445
neighbor activate	446
neighbor advertisement-interval	447
neighbor default-originate	447
neighbor distribute-list	448
neighbor filter-list	449
neighbor maximum-prefix	449
neighbor next-hop-self	450
neighbor remove-private-as	451
neighbor route-map	451
neighbor route-reflector-client	452
network	452
redistribute	453
redistribute ospf	454
show ip bgp ipv4 multicast	455
show ip bgp cluster-list	456
show ip bgp community	457
show ip bgp community-list	458
show ip bgp dampened-paths	458
show ip bgp filter-list	459
show ip bgp flap-statistics	459
show ip bgp inconsistent-as	460
show ip bgp ipv4 multicast neighbors	461
show ip bgp peer-group	464
show ip bgp summary	464
BGP Extended Communities (RFC 4360)	466
deny	466
deny regex	467
description	468
ip extcommunity-list	468
match extcommunity	469
permit	469
permit regex	470
set extcommunity rt	471
set extcommunity soo	472
show ip bgp ipv4 extcommunity-list	473
show ip bgp paths extcommunity	474
show ip extcommunity-list	474
show running-config extcommunity-list	475
IPv6 BGP Commands	476
address-family	476
aggregate-address	476
bgp always-compare-med	477
bgp bestpath as-path ignore	478
bgp bestpath med confed	478
bgp bestpath med missing-as-best	479
bgp client-to-client reflection	479
bgp cluster-id	480
bgp confederation identifier	480
bgp confederation peers	481
bgp dampening	481
bgp default local-preference	482
bgp enforce-first-as	483
bgp fast-external-fallover	483
bgp four-octet-as-support	484
bgp graceful-restart	484
bgp log-neighbor-changes	485
bgp non-deterministic-med	486
bgp recursive-bgp-next-hop	486
bgp regex-eval-optz-disable	487
bgp router-id	487
bgp soft-reconfig-backup	488
capture bgp-pdu neighbor (ipv6)	488
capture bgp-pdu max-buffer-size	489
clear ip bgp * (asterisk)	490
clear ip bgp as-number	490
clear ip bgp ipv6-address	491
clear ip bgp peer-group	492
debug ip bgp ipv6 dampening	492
clear ip bgp ipv6 flap-statistics	493
clear ip bgp ipv6 unicast soft	494
debug ip bgp	495
debug ip bgp ipv6 dampening	496
debug ip bgp events	496
debug ip bgp ipv6 unicast soft-reconfiguration	497
debug ip bgp keepalives	498
debug ip bgp notifications	498
debug ip bgp updates	499
default-metric	500
description	500
distance bgp	501
ipv6 prefix-list	501
maximum-paths	502
neighbor activate	502