Dell Force10 S25N-S50N FTOS Command Line Reference Guide FTOS 8.4.2.7 E-Series - Page 232

www.dell.com | support.dell.com Command History Version 8.1.1.0 Version 7.8.1.0 Version 7.6.1.0 Version 7.5.1.0 pre-Version 6.2.1.1 Introduced on E-Series ExaScale Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Support added for S-Series Support added for C-Series Introduced on E-Series Usage The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation Information for detailed specification on entries allowed per ACL. Prior to 7.8.1.0, names are up to 16 characters long. Example Figure 9-5. Command Example: ip access-list extended FTOS(conf)#ip access-list extended TESTListEXTEND FTOS(config-ext-nacl)# Related Commands ip access-list standard show config Configure a standard IP access list. Display the current configuration. permit c e s Configure a filter to pass IP packets meeting the filter criteria. Syntax permit {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [byte] | log] [dscp value] [order] [monitor] [fragments] To remove this filter, you have two choices: • Use the no seq sequence-number command syntax if you know the filter's sequence number or • Use the no deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} command. Parameters ip ip-protocol-number source mask any host ip-address destination count Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list will permit all IP protocols. Enter a number from 0 to 255 to permit based on the protocol identified in the IP protocol header. Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. Enter the keyword any to specify that all routes are subject to the filter. Enter the keyword host followed by the IP address to specify a host IP address. Enter the IP address of the network or host to which the packets are sent. (OPTIONAL) Enter the keyword count to count packets processed by the filter. 232 | Access Control Lists (ACL)