Dell N3200-ON Networking N-Series Switches User Guide version 6.8.0 - Page 674

Table 19-2. ACL Software Limits (Continued) Limitation Dell Dell Networking Networking N1108EP-ON N1500 Series Series Maximum ACL 1021 ing., 253 378 ing., 253 Rules per Interface egr. egr. and Direction (IPv6) Maximum ACL Rules (systemwide) 2030 Maximum VLAN 24 interfaces with ACLs applied Maximum ACL 128 Logging Rules (system-wide) Dell Networking N2024/N2048/ N2200-ON Series 1023 ing., 509 egr. 3914 24 128 Dell Networking N3200-ON Series 1021 ing., 509 egr 3914 24 128 Note the following additional limitations on ingress and egress ACLs: • Port ranges are not supported for egress ACLs for either IPv4 or IPv6 ACLs. • It is possible to configure mirror or redirect attributes for a given ACL rule, but not both. • The Dell Networking N-Series switches support a limited number of counter resources, so it may not be possible to log every ACL rule. It is possible to define an ACL with any number of logging rules, but the rules that are actually logged cannot be determined until the ACL is configured in the interface hardware. Furthermore, hardware counters that become available after an ACL is applied are not retroactively assigned to rules that were unable to be logged (the ACL must be disassociated from the interface and then re-associated). Rules that are unable to be logged are still active in the ACL for purposes of permitting or denying a matching packet. If console logging is enabled and the severity is set to a numerically equal or lower severity than the console severity setting, a log entry may appear on the screen. 674 Access Control Lists