Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.7 - Page 290

Ethertype 0x8906 0x8914 0x9100 Protocol Fibre Channel over Ethernet FCoE Initialization Protocol Q in Q In order to provide the greatest amount of flexibility in configuring ACLs, the permit/deny syntax allows combinations of matching criteria that may not make sense when applied in practice. Port ranges are not supported for ACLs configured in egress (out) accessgroups. This means that only the eq operator is supported in an egress (out) ACL. The protocol type must be sctp, tcp or udp to specify a port range. The fragment keyword is not supported for ACLs configured in egress (out) IPv4 access-groups. Rate limits are only valid for permit rules. Any - is equivalent to 0.0.0.0 255.255.255.255 for IPv4 access lists Host - indicates specified address with mask equal to 255.255.255.255 and address 0.0.0.0 for IPv4. The command accepts the optional time-range parameter. The time-range parameter allows imposing a time limitation on the IP ACL rule as defined by the parameter time-range-name. If a time range with the specified name does not exist, and the IP ACL containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is applied immediately. If a time range with the specified name exists, and the IP ACL containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is applied when the time-range with a specified name becomes active. The ACL rule is removed when the time-range with a specified name becomes inactive. An implicit deny all condition is added by the system after the last MAC or IP/IPv6 access group if no route-map is configured on the interface. Every permit/deny rule that does not have a rate-limit parameter is assigned a counter. If counter resources become exhausted, a warning is issued and the rule is applied to the hardware without the counter. Layer 2 Switching Commands 290