Dell Force10 S60-44T FTOS Command Line Reference Guide for the S60 System FTOS - Page 225
permit, count, monitor, no seq, Syntax, Parameters, Defaults, Command Modes
View all Dell Force10 S60-44T manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 225 highlights
seq c e s Configure a filter with a specific sequence number. Syntax seq sequence-number {deny | permit} {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype operator] [count [byte]] [log] [monitor] To delete a filter, use the no seq sequence-number command. Parameters sequence-number deny permit any host mac-address mac-source-address mac-source-address-mask mac-destination-address mac-destination-address-mask ethertype operator count byte log monitor Enter a number as the filter sequence number. Range: zero (0) to 65535. Enter the keyword deny to drop any traffic matching this filter. Enter the keyword permit to forward any traffic matching this filter. Enter the keyword any to filter all packets. Enter the keyword host followed by a MAC address to filter packets with that host address. Enter the source MAC address in nn:nn:nn:nn:nn:nn format. The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. Specify which bits in the MAC address must be matched. Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format. Specify which bits in the MAC address must be matched. The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. (OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes: • ev2 - is the Ethernet II frame format. • llc - is the IEEE 802.3 frame format. • snap - is the IEEE 802.3 SNAP frame format. (OPTIONAL) Enter the keyword count to count packets processed by the filter. (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. (OPTIONAL, E-Series only) Enter the keyword log to log the packets. (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section "Flow-based Monitoring" in the Port Monitoring chapter of the FTOS Configuration Guide. Defaults Not configured Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD Access Control Lists (ACL) | 225