Dell N3200-ON Networking N-Series Switches CLI Reference Guide version 6.8.0 - Page 1085

• The ip token indicates an IPv4 ACL name follows the equals sign. • The IPv6 token indicates an IPv6 ACL name follows the equals sign. • The extended-access-control-list-name token identifies an IP/IPv6 Extended ACL Name of an existing ACL. The name is case sensitive. • The tokens ip:inacl and ipv6:inacl are in lower case and are followed by an equals sign with no intervening white space. Different authentication sessions, as in the case of the data and voice VLAN authenticating independently, may both have Dynamic ACLs. It is recommended that the DACLs be carefully designed so that they work in harmony, such as, at a minimum, no ACL numbers are duplicated across the DACLs. DACLs are applied at the port level and are capable of affecting any traffic ingressing the port. Predefined ACL Examples ip:inacl=Named_ACL ipv6:inacl=Named_IPv6_ACL Dynamic ACL Definition This method uses ACL syntax to create a new ingress ACL on the switch: ip:inacl[#number]={extended-access-control-list} ipv6:inacl[#number]={extended-access-control-list} • The ip token indicates an IPv4 ACL definition follows the equals sign. • The ipv6 token indicates an IPv6 ACL definition follows the equals sign. • #number is the ACL sequence number in decimal format. Range 1- 2147483647. • The tokens ip:inacl and ipv6:inacl are in lower case and are followed by an equals sign with no intervening white space. • extended-access-control-list means an extended IPv4/IPv6 Extended ACL CLI rule definition beginning with the {permit|deny} tokens followed by the protocol {every | eigrp | gre | icmp | igmp | ip | ipinip | ospf | pim | tcp | udp | 0-55} for IPv4 and {every icmpv6| ipv6 | sctp | tcp | udp} for IPv6. Security Commands 1085