Dell Force10 S50-01-GE-48T FTOS 8.4.2.7 Command Line Reference Guide for E-Ser - Page 219

• permit ether-type • permit icmp • permit tcp • permit udp • resequence access-list • resequence prefix-list ipv4 • seq arp • seq ether-type • seq Note: See also Commands Common to all ACL Types and Common IP ACL Commands. deny c e s Configure a filter that drops IP packets meeting the filter criteria. Syntax deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [byte] | log] [dscp value] [order] [monitor] [fragments] To remove this filter, you have two choices: • Use the no seq sequence-number command syntax if you know the filter's sequence number or • Use the no deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} command. Parameters ip ip-protocol-number source mask any host ip-address destination count byte log dscp Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list will deny all IP protocols. Enter a number from 0 to 255 to deny based on the protocol identified in the IP protocol header. Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. Enter the keyword any to specify that all routes are subject to the filter. Enter the keyword host followed by the IP address to specify a host IP address. Enter the IP address of the network or host to which the packets are sent. (OPTIONAL) Enter the keyword count to count packets processed by the filter. (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. (OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log. (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. Access Control Lists (ACL) | 219