Home » Dell Manuals » Servers » Dell Force10 Z9000 » Manual Viewer

Dell Force10 Z9000 FTOS Command Line Reference Guide for the Z9000 System FTOS - Page 265

Standard MAC ACL Commands, deny, The S4810 and Z9000 support both Ingress and Egress MAC ACLs.

Add to My Manuals
Save this manual to your list of manuals

Page 265 highlights

Example FTOS#show mac accounting access-list mac-ext interface po 1 Extended mac access-list mac-ext on GigabitEthernet 0/11 seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19 count (393794576 packets) seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29 count (89076777 packets) seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39 count (0 packets) seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49 count (0 packets) seq 25 permit any any count (0 packets) Extended mac access-list mac-ext on GigabitEthernet 0/12 seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19 count (57589834 packets) seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29 count (393143077 packets) seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39 count (0 packets) seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49 count (0 packets) seq 25 permit any any count (0 packets) FTOS# Standard MAC ACL Commands When you create an access control list without any rule and then apply it to an interface, the ACL behavior reflects implicit permit. These commands configure standard MAC ACLs. The C-Series and S-Series platforms (except the S4810 system) support Ingress MAC ACLs only. The S4810 and Z9000 support both Ingress and Egress MAC ACLs. NOTE: For more information, also refer to the Commands Common to all ACL Types and Common MAC Access List Commands sections. deny Configure a filter to drop packets with a the MAC address specified. C-Series, E-Series, S-Series, Z-Series Syntax deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter's sequence number. • Use the no deny {any | mac-source-address mac-sourceaddress-mask} command. Parameters any Enter the keyword any to specify that all routes are subject to the filter. 265

Section	Page
FTOS Command Line Reference Guide for the Z9000 System FTOS 9.1.(0.0)	3
About this Guide	43
Objectives	43
Audience	43
Conventions	43
Information Icons	44
CLI Basics	45
Accessing the Command Line	45
Multiple Configuration Users	45
Object Missing	47
Obtaining Help	47
Using the Keyword no Command	48
Filtering show Commands	49
Command Modes	50
Determining Chassis Mode	56
File Management	57
boot config	57
boot host	59
boot network	59
boot system	60
boot system (S4810 and Z9000)	61
boot system gateway	62
cd	63
change bootflash-image	63
copy	64
copy (Streamline Upgrade)	66
copy running-config startup-config	67
delete	67
dir	68
download alt-boot-image	69
download alt-full-image	69
download alt-system-image	70
format (C-Series and E-Series)	70
format flash (S-Series)	71
format flash (Z9000)	72
fsck flash (S-Series and Z-Series)	72
pwd	73
rename	73
show boot system	74
show bootvar	75
show file	76
show file-systems	77
show linecard	78
show os-version	79
show running-config	80
show startup-config	84
show version	84
upgrade (C-Series version)	87
upgrade (E-Series version)	88
upgrade (S-Series management unit and Z-Series)	90
upgrade fpga-image	92
restore fpga-image	93
upgrade fpga-image	94
Control and Monitoring	97
asf-mode	97
audible cut-off	98
banner exec	98
banner login	99
banner motd	100
cam-audit linecard	101
clear alarms	102
clear command history	102
clear line	103
configure	103
debug cpu-traffic-stats	104
debug ftpserver	105
disable	105
do	106
enable	107
enable optic-info-update interval	107
enable xfp-power-updates	108
end	109
epoch	109
exec-banner	111
exec-timeout	111
exit	112
ftp-server enable	113
ftp-server topdir	114
ftp-server username	114
hostname	115
ip ftp password	116
ip ftp source-interface	116
ip ftp username	118
ip telnet server enable	118
ip telnet source-interface	119
ip tftp source-interface	120
line	121
linecard	122
linecard (4-port 40G line card)	123
module power-off	125
motd-banner	125
ping	126
power-off	129
power-on	130
reload	130
reset	131
rpm <slot> location-led	132
send	133
service timestamps	134
show alarms	135
show chassis	136
show command-history	137
show command-tree	139
show console lp	140
show cpu-traffic-stats	140
show debugging	142
show environment (C-Series and E-Series)	142
show environment (S-Series)	144
show inventory (C-Series and E-Series)	146
show inventory (S-Series and Z-Series)	148
show linecard	150
show linecard boot-information	153
show memory (C-Series and E-Series)	154
show memory (S-Series)	155
show processes cpu (C-Series and E-Series)	156
show processes cpu (S-Series)	158
show processes ipc flow-control	162
show processes memory (C-Series and E-Series)	165
show processes memory (S-Series)	168
show processes switch-utilization	171
show rpm	171
show software ifm	174
show switch links	175
show system (S-Series and Z-Series)	176
show tech-support (C-Series and E-Series)	179
show tech-support (S-Series and Z-Series)	182
ssh-peer-rpm	185
ssh-peer-stack-unit	185
telnet	186
telnet-peer-stack-unit	187
terminal length	187
terminal xml	188
traceroute	189
undebug all	191
upload trace-log	191
virtual-ip	192
write	193
802.1X	195
debug dot1x	196
dot1x auth-fail-vlan	196
dot1x auth-server	197
dot1x auth-type mab-only	197
dot1x authentication (Configuration)	198
dot1x authentication (Interface)	199
dot1x guest-vlan	199
dot1x host-mode	200
dot1x mac-auth-bypass	201
dot1x max-eap-req	201
dot1x max-supplicants	202
dot1x port-control	202
dot1x quiet-period	203
dot1x reauthentication	203
dot1x reauth-max	204
dot1x server-timeout	204
dot1x supplicant-timeout	205
dot1x tx-period	206
show dot1x cos-mapping interface	206
show dot1x interface	207
Access Control Lists (ACL)	211
Commands Common to all ACL Types	211
description	211
remark	212
show config	213
Common IP ACL Commands	214
access-class	214
clear counters ip access-group	214
ip access-group	215
ip control-plane egress-filter	216
show ip accounting access-list	216
Standard IP ACL Commands	218
deny	218
ip access-list standard	220
permit	221
resequence access-list	222
resequence prefix-list ipv4	223
seq	224
Extended IP ACL Commands	226
deny	226
deny arp	228
deny ether-type	230
deny icmp	232
deny tcp	235
deny udp	238
ip access-list extended	240
permit	241
permit arp	243
permit ether-type	245
permit icmp	247
permit tcp	248
permit udp	251
resequence access-list	254
resequence prefix-list ipv4	255
seq arp	255
seq ether-type	257
seq	259
Common MAC Access List Commands	262
clear counters mac access-group	262
mac access-group	263
show mac accounting access-list	264
Standard MAC ACL Commands	265
deny	265
mac access-list standard	266
permit	267
seq	269
Extended MAC ACL Commands	270
deny	270
mac access-list extended	272
permit	273
seq	275
IP Prefix List Commands	276
clear ip prefix-list	276
deny	277
ip prefix-list	278
permit	279
seq	279
show config	280
show ip prefix-list detail	281
show ip prefix-list summary	282
Route Map Commands	283
continue	283
description	284
match as-path	284
match community	285
match interface	286
match ip address	287
match ip next-hop	287
match ip route-source	288
match metric	289
match origin	290
match route-type	290
match tag	291
route-map	292
set as-path	293
set automatic-tag	294
set comm-list delete	294
set community	295
set level	296
set local-preference	297
set metric	298
set metric-type	298
set next-hop	299
set origin	300
set tag	301
set weight	301
show config	302
show route-map	302
AS-Path Commands	303
deny	303
ip as-path access-list	304
permit	305
show config	306
show ip as-path-access-lists	306
IP Community List Commands	307
deny	307
ip community-list	308
permit	309
show config	310
show ip community-lists	310
Bidirectional Forwarding Detection (BFD)	313
bfd all-neighbors	313
bfd disable	314
bfd enable (Configuration)	315
bfd enable (Interface)	315
bfd interval	316
bfd neighbor	317
bfd protocol-liveness	317
clear bfd counters	318
debug bfd	319
ip route bfd	320
isis bfd all-neighbors	321
neighbor bfd	322
neighbor bfd disable	323
show bfd counters	324
show bfd neighbors	325
vrrp bfd	327
Border Gateway Protocol	329
BGP IPv4 Commands	329
address-family	330
aggregate-address	330
bgp add-path	331
bgp always-compare-med	332
bgp asnotation	332
bgp bestpath as-path ignore	333
bgp bestpath as-path multipath-relax	334
bgp bestpath med confed	334
bgp bestpath med missing-as-best	335
bgp bestpath router-id ignore	335
bgp client-to-client reflection	336
bgp cluster-id	336
bgp confederation identifier	337
bgp confederation peers	338
bgp dampening	339
bgp default local-preference	340
bgp enforce-first-as	340
bgp fast-external-fallover	341
bgp four-octet-as-support	341
bgp graceful-restart	342
bgp log-neighbor-changes	343
bgp non-deterministic-med	343
bgp recursive-bgp-next-hop	344
bgp regex-eval-optz-disable	344
bgp router-id	345
bgp soft-reconfig-backup	346
capture bgp-pdu neighbor	347
capture bgp-pdu max-buffer-size	347
clear ip bgp	348
clear ip bgp dampening	349
clear ip bgp flap-statistics	350
clear ip bgp peer-group	351
debug ip bgp	351
debug ip bgp dampening	352
debug ip bgp events	353
debug ip bgp keepalives	353
debug ip bgp notifications	354
debug ip bgp soft-reconfiguration	355
debug ip bgp updates	355
default-metric	356
description	357
distance bgp	357
max-paths	358
neighbor activate	359
neighbor add-path	359
neighbor advertisement-interval	360
neighbor advertisement-start	361
neighbor allowas-in	361
neighbor default-originate	362
neighbor description	362
neighbor distribute-list	363
neighbor ebgp-multihop	364
neighbor fall-over	364
neighbor filter-list	365
neighbor graceful-restart	366
neighbor local-as	367
neighbor maximum-prefix	367
neighbor next-hop-self (C-, E-, and S-Series)	368
neighbor password	369
neighbor peer-group (assigning peers)	370
neighbor peer-group (creating group)	371
neighbor peer-group passive	372
neighbor remote-as	372
neighbor remove-private-as	373
neighbor route-map	374
neighbor route-reflector-client	375
neighbor send-community	375
neighbor shutdown	376
neighbor soft-reconfiguration inbound	377
neighbor subnet	378
neighbor timers	378
neighbor update-source	379
neighbor weight	380
network	380
network backdoor	381
redistribute	382
redistribute isis	383
redistribute ospf	384
router bgp	385
show capture bgp-pdu neighbor	386
show config	387
show ip bgp	387
show ip bgp cluster-list	389
show ip bgp community	390
show ip bgp community-list	392
show ip bgp dampened-paths	394
show ip bgp detail	394
show ip bgp extcommunity-list	396
show ip bgp filter-list	397
show ip bgp flap-statistics	398
show ip bgp inconsistent-as	400
show ip bgp neighbors	401
show ip bgp next-hop	406
show ip bgp paths	407
show ip bgp paths as-path	408
show ip bgp paths community	409
show ip bgp peer-group	410
show ip bgp regexp	412
show ip bgp summary	414
show running-config bgp	416
timers bgp	417
MBGP Commands	417
address family ipv4 multicast (MBGP)	418
aggregate-address	418
bgp dampening	419
clear ip bgp ipv4 multicast	420
clear ip bgp dampening	420
clear ip bgp flap-statistics	421
debug ip bgp dampening	422
debug ip bgp peer-group updates	422
debug ip bgp updates	423
distance bgp	423
neighbor activate	424
neighbor advertisement-interval	425
neighbor default-originate	425
neighbor distribute-list	426
neighbor filter-list	427
neighbor maximum-prefix	427
neighbor next-hop-self	428
neighbor remove-private-as	429
neighbor route-map	429
neighbor route-reflector-client	430
network	430
redistribute	431
redistribute ospf	432
show ip bgp ipv4 multicast	433
show ip bgp cluster-list	434
show ip bgp community	435
show ip bgp community-list	436
show ip bgp dampened-paths	436
show ip bgp filter-list	437
show ip bgp flap-statistics	437
show ip bgp inconsistent-as	438
show ip bgp ipv4 multicast neighbors	439
show ip bgp peer-group	442
show ip bgp summary	442
BGP Extended Communities (RFC 4360)	444
deny	444
deny regex	445
description	446
ip extcommunity-list	446
match extcommunity	447
permit	447
permit regex	448
set extcommunity rt	449
set extcommunity soo	450
show ip bgp ipv4 extcommunity-list	451
show ip bgp paths extcommunity	452
show ip extcommunity-list	452
show running-config extcommunity-list	453
IPv6 BGP Commands	454
address-family	454
aggregate-address	454
bgp always-compare-med	455
bgp bestpath as-path ignore	456
bgp bestpath med confed	456
bgp bestpath med missing-as-best	457
bgp client-to-client reflection	457
bgp cluster-id	458
bgp confederation identifier	458
bgp confederation peers	459
bgp dampening	459
bgp default local-preference	460
bgp enforce-first-as	461
bgp fast-external-fallover	461
bgp four-octet-as-support	462
bgp graceful-restart	462
bgp log-neighbor-changes	463
bgp non-deterministic-med	464
bgp recursive-bgp-next-hop	464
bgp regex-eval-optz-disable	465
bgp router-id	465
capture bgp-pdu neighbor (ipv6)	466
capture bgp-pdu max-buffer-size	466
clear ip bgp * (asterisk)	467
clear ip bgp as-number	468
clear ip bgp ipv6-address	469
clear ip bgp peer-group	470
debug ip bgp ipv6 dampening	470
clear ip bgp ipv6 flap-statistics	471
debug ip bgp	472
debug ip bgp ipv6 dampening	472
debug ip bgp events	473
debug ip bgp keepalives	474
debug ip bgp notifications	474
debug ip bgp updates	475
default-metric	476
description	476
distance bgp	477
ipv6 prefix-list	477
max-paths	478
maximum-paths	479
neighbor activate	479
neighbor advertisement-interval	480
neighbor allowas-in	480
neighbor default-originate	481
neighbor description	482
neighbor distribute-list	482
neighbor ebgp-multihop	483
neighbor fall-over	484
neighbor filter-list	484
neighbor maximum-prefix	485
neighbor X:X:X::X password	486
neighbor next-hop-self	486
neighbor peer-group (assigning peers)	487
neighbor peer-group (creating group)	488
neighbor peer-group passive	488
neighbor remote-as	489
neighbor remove-private-as	490
neighbor route-map	490
neighbor route-reflector-client	491
neighbor shutdown	492
neighbor subnet	492
neighbor timers	493
neighbor update-source	494
neighbor weight	494
network	495
network backdoor	496
redistribute	497
redistribute isis	498
redistribute ospf	499
router bgp	499
show capture bgp-pdu neighbor	500