Dell C9010 Modular Chassis Switch EMC Networking Command-Line Reference Guide - Page 276

Related Commands By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Use the monitor option only when you are using flow-based monitoring. For more information, refer to the Port Monitoring chapter in the C9000 Series Configuration Guide. NOTE: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. deny - configures a MAC ACL filter to drop packets. seq - configure a MAC ACL filter with a specified sequence number. seq Configure a filter with a specific sequence number. C9000 Series Syntax Parameters seq sequence-number {deny | permit} {any | host mac-address | mac-sourceaddress mac-source-address-mask} {any | host mac-address | mac-destinationaddress mac-destination-address-mask} [ethertype operator] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To delete a filter, use the no seq sequence-number command. sequencenumber deny permit any host macaddress mac-sourceaddress Enter a number as the filter sequence number. The range is from zero (0) to 65535. Enter the keyword deny to drop any traffic matching this filter. Enter the keyword permit to forward any traffic matching this filter. Enter the keyword any to filter all packets. Enter the keyword host and then enter a MAC address to filter packets with that host address. Enter a MAC address in nn:nn:nn:nn:nn:nn format. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. mac-sourceaddress-mask Specify which bits in the MAC address must be matched. mac-destination- Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format. address mac-destinationaddress-mask Specify which bits in the MAC address must be matched. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. ethertype operator (OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes: ● ev2 - is the Ethernet II frame format. ● llc - is the IEEE 802.3 frame format. ● snap - is the IEEE 802.3 SNAP frame format. count byte (OPTIONAL) Enter the keyword count to count packets the filter processes. (OPTIONAL) Enter the keyword byte to count bytes the filter processes. 276 Access Control Lists (ACL)