Dell Force10 S4820T FTOS Command Reference Guide - Page 242

www.dell.com | support.dell.com deny c e s Syntax Parameters Defaults Command Modes Command History Configure a filter to drop packets with a the MAC address specified. deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command syntax if you know the filter's sequence number or • Use the no deny {any | mac-source-address mac-source-address-mask} command. any mac-source-address mac-source-address-mask count byte log monitor Enter the keyword any to specify that all traffic is subject to the filter. Enter a MAC address in nn:nn:nn:nn:nn:nn format. (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). (OPTIONAL) Enter the keyword count to count packets processed by the filter. (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. (OPTIONAL, E-Series only) Enter the keyword log to log the packets. (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, refer to the section "Flow-based Monitoring" in the Port Monitoring chapter of the FTOS Configuration Guide. Not enabled. CONFIGURATION-MAC ACCESS LIST-STANDARD Version 8.1.1.0 Version 7.6.1.0 Version 7.5.1.0 Version 7.4.1.0 pre-Version 6.1.1.0 Introduced on E-Series ExaScale Support added for S-Series Support added for C-Series Added monitor option Introduced for E-Series Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. 242 | Access Control Lists (ACL)