Dell Force10 S4820T FTOS Command Reference Guide - Page 751
Con a filter to pass TCP packets that match the filter criteria., options
View all Dell Force10 S4820T manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 751 highlights
Defaults Command Modes Command History Usage Information message-type count byte log monitor (OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type. Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code (OPTIONAL) Enter the keyword count to count packets processed by the filter. (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. (OPTIONAL) Enter the keyword log to have the information kept in an ACL log file. (OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation. Not configured ACCESS-LIST Version 8.3.19.0 Version 8.3.7.0 Version 8.4.2.1 Version 8.2.1.0 Version 7.8.1.0 Version 7.4.1.0 Introduced on the S4820T Introduced support on the S4810 Introduced on the S-Series Introduced on the E-Series ExaScale Introduced on the C-Series Introduced on the E-Series TeraScale Added monitor option The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented. permit tcp c e s Syntax Configure a filter to pass TCP packets that match the filter criteria. permit tcp {source address mask | any | host ipv6-address} [operator port [port]] {destination address | any | host ipv6-address} [bit] [operator port [port]] [count [byte]] | [log] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command syntax if you know the filter's sequence number or • Use the no permit tcp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} command. IPv6 Access Control Lists (IPv6 ACLs) | 751