Home » Dell Manuals » Hubs & Switches » Dell S3100 » Manual Viewer

Dell S3100 EMC Command Line Reference Guide for the Series 9.14.2.4 - Page 202

ip access-list extended

Add to My Manuals
Save this manual to your list of manuals

Page 202 highlights

Related Commands 1 0000000000000000 1111110000000000 0 Total Ports: 1024 • deny - assign a filter to deny IP traffic. • deny tcp - assign a filter to deny TCP traffic. 1023 1024 ip access-list extended Name (or select) an extended IP access list (IP ACL) based on IP addresses or protocols. Syntax ip access-list extended access-list-name To delete an access list, use the no ip access-list extended access-list-name command. Parameters access-list-name Enter a string up to 140 characters long as the access list name. Defaults All access lists contain an implicit "deny any"; that is, if no match occurs, the packet is dropped. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.10(0.1) 9.10(0.0) 9.10(0.0) 9.8(2.0) 9.8(1.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.10.0 8.1.1.0 7.8.1.0 7.6.1.0 7.5.1.0 6.2.1.1 Introduced on the S6010-ON and S4048T-ON. Introduced on the S3148. Introduced on the S6100-ON. Introduced on the S3100 series. Introduced on the Z9100-ON. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series. Usage Information The number of entries allowed per ACL is hardware-dependent. For detailed specification about entries allowed per ACL, refer to your line card documentation. Prior to 7.8.1.0, names are up to 16 characters long. Example DellEMC(conf)# ip access-list extended TESTListEXTEND DellEMC(config-ext-nacl)# 202 Access Control Lists (ACL)

Section	Page
Dell EMC Command Line Reference Guide for the S3100 Series 9.14.2.4	3
About this Guide	40
Objectives	40
Audience	40
Conventions	40
CLI Basics	41
Accessing the Command Line	41
Multiple Configuration Users	41
Obtaining Help	42
Navigating the CLI	43
Using the no Command	43
Filtering show Commands	44
Enabling Software Features on Devices Using a Command Option	44
feature vrf	45
show feature	45
Command Modes	46
File Management	54
boot system	54
cd	55
copy	56
delete	59
dir	59
format	61
fsck flash	61
mkdir	62
mount nfs	63
rmdir	63
upgrade system	64
rename	66
restore factory-defaults	67
show boot system	69
show bootvar	70
show file-systems	71
show os-version	72
show running-config	73
show startup-config	77
show version	78
upgrade	79
Control and Monitoring	82
banner exec	82
banner login	83
banner motd	84
cam-acl	85
cam-acl-vlan	87
clear average-power	87
clear line	88
configure	88
disable	89
do	90
enable	91
enable optic-info-update interval	92
end	93
exec-timeout	94
exit	95
ftp-server enable	96
ftp-server topdir	97
ftp-server username	98
hostname	98
ip http source-interface	99
ip http vrf	100
ip ftp password	101
ip ftp source-interface	102
ip ftp username	103
ip ftp vrf	103
ip telnet server enable	104
ip telnet server vrf	105
ip telnet source-interface	105
ip telnet vrf	107
ip tftp source-interface	107
ip tftp vrf	108
line	109
login concurrent-session	110
login statistics	111
motd-banner	112
ping	113
reload	116
send	117
service timestamps	118
show alarms	119
show cam-acl-vlan	120
show command-history	121
show cpu-traffic-stats	122
show debugging	124
show environment	124
show inventory	126
show login statistics	127
show memory	129
show processes cpu	130
show processes ipc flow-control	133
show processes memory	134
show reset-reason	136
show software ifm	138
show system	139
show tech-support	141
ssh-peer-stack-unit	144
telnet	145
telnet-peer-stack-unit	146
terminal length	147
traceroute	147
undebug all	149
virtual-ip	150
write	151
802.1X	153
dot1x critical-vlan	154
debug dot1x	155
dot1x auth-fail-vlan	155
dot1x auth-server	156
dot1x auth-type mab-only	157
dot1x authentication (Configuration)	158
dot1x authentication (Interface)	158
dot1x guest-vlan	159
dot1x host-mode	160
dot1x mac-auth-bypass	161
dot1x max-eap-req	162
dot1x max-supplicants	163
dot1x port-control	163
dot1x profile	164
dot1x quiet-period	165
dot1x reauthentication	165
dot1x reauth-max	166
dot1x server-timeout	167
dot1x static-mab	168
dot1x supplicant-timeout	169
dot1x tx-period	169
mac	170
show dot1x cos-mapping interface	171
show dot1x interface	172
show dot1x profile	175
Access Control Lists (ACL)	176
Commands Common to all ACL Types	177
remark	177
show config	179
Common IP ACL Commands	179
access-class	180
clear counters ip access-group	181
ip access-group	181
ip control-plane egress-filter	183
show ip accounting access-list	183
show ip access-lists	185
Standard IP ACL Commands	186
deny	186
ip access-list standard	187
permit	188
resequence access-list	190
seq	191
Extended IP ACL Commands	192
deny	193
deny icmp	195
deny tcp	196
deny udp	199
ip access-list extended	202
permit	203
permit tcp	204
permit udp	207
resequence access-list	210
seq	211
Common MAC Access List Commands	213
clear counters mac access-group	213
mac access-group	214
show mac access-lists	215
show mac accounting access-list	216
Standard MAC ACL Commands	217
deny	217
mac access-list standard	219
permit	220
seq	221
Extended MAC ACL Commands	222
deny	222
mac access-list extended	224
permit	225
IP Prefix List Commands	227
clear ip prefix-list	227
deny	228
ip prefix-list	229
seq	230
show config	231
show ip prefix-list detail	231
show ip prefix-list summary	232
Route Map Commands	233
continue	233
description	234
match as-path	235
match community	236
match interface	237
match ip address	238
match ip next-hop	239
match ip route-source	240
match metric	240
match origin	241
match route-type	242
match tag	243
route-map	244
set as-path	245
set automatic-tag	246
set comm-list delete	247
set community	248
set level	249
set local-preference	250
set metric	251
set metric-type	251
set next-hop	252
set origin	253
set tag	254
set weight	255
show config	256
show route-map	257
AS-Path Commands	257
ip as-path access-list	258
show ip as-path-access-lists	258
IP Community List Commands	259
ip community-list	259
show ip community-lists	260
deny (for Standard IP ACLs)	260
deny (for Extended IP ACLs)	261
seq (for Standard IPv4 ACLs)	263
deny tcp (for Extended IP ACLs)	264
deny udp (for Extended IP ACLs)	266
deny arp (for Extended MAC ACLs)	267
deny icmp (for Extended IP ACLs)	268
deny ether-type (for Extended MAC ACLs)	269
deny (for Standard MAC ACLs)	270
deny (for Extended MAC ACLs)	272
permit (for Standard IP ACLs)	273
permit arp (for Extended MAC ACLs)	274
permit ether-type (for Extended MAC ACLs)	275
permit icmp (for Extended IP ACLs)	276
permit udp (for Extended IP ACLs)	278
permit (for Extended IP ACLs)	279
permit (for Standard MAC ACLs)	281
seq (for Standard MAC ACLs)	282
permit tcp (for Extended IP ACLs)	283
seq arp (for Extended MAC ACLs)	285
seq ether-type (for Extended MAC ACLs)	286
seq (for IP ACLs)	287
seq (for IPv6 ACLs)	289
permit udp (for IPv6 ACLs)	290
permit tcp (for IPv6 ACLs)	292
permit icmp (for IPv6 ACLs)	294
permit (for IPv6 ACLs)	296
deny udp (for IPv6 ACLs)	297
deny tcp (for IPv6 ACLs)	299
deny icmp (for Extended IPv6 ACLs)	301
deny (for IPv6 ACLs)	303
Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM)	305
member vlan	305
ip access-group	305
show acl-vlan-group	306
show cam-acl-vlan	307
cam-acl-vlan	308
show cam-usage	309
show running config acl-vlan-group	311
acl-vlan-group	312
show acl-vlan-group detail	312
description (ACL VLAN Group)	313
Bidirectional Forwarding Detection (BFD)	314
bfd all-neighbors	314
bfd disable	316
bfd enable (Configuration)	316
bfd enable (Interface)	317
bfd interval	317
bfd protocol-liveness	318
ip route bfd	319
ip ospf bfd all-neighbors	320
ipv6 ospf bfd all-neighbors	321
ipv6 route bfd	322
isis bfd all-neighbors	323
neighbor bfd	324
neighbor bfd disable	325
show bfd neighbors	325
vrrp bfd neighbor	327
Border Gateway Protocol	329
BGP IPv4 Commands	329
address-family	329
aggregate-address	330
bgp add-path	331
bgp always-compare-med	332
bgp asnotation	333
bgp bestpath as-path ignore	334
bgp bestpath as-path multipath-relax	335
bgp bestpath med confed	335
bgp bestpath med missing-as-best	336
bgp bestpath router-id ignore	337
bgp client-to-client reflection	337
bgp cluster-id	338
bgp confederation identifier	339
bgp confederation peers	340
bgp connection-retry-timer	341
bgp dampening	341
bgp default local-preference	342
bgp dmzlink-bw	343
bgp enforce-first-as	344
bgp fast-external-fallover	344
bgp four-octet-as-support	345
bgp graceful-restart	346
bgp non-deterministic-med	347
bgp outbound-optimization	348
bgp outbound-optimization	348
bgp recursive-bgp-next-hop	349
bgp regex-eval-optz-disable	349
bgp router-id	351
clear ip bgp	351
clear ip bgp dampening	353
clear ip bgp flap-statistics	354
clear ip bgp peer-group	355
deny bandwidth	356
debug ip bgp	357
debug ip bgp dampening	358
debug ip bgp events	359
debug ip bgp keepalives	360
debug ip bgp notifications	361
debug ip bgp soft-reconfiguration	361
debug ip bgp updates	362
default-metric	363
description	364
maximum-paths	365
neighbor activate	366
neighbor add-path	367
neighbor advertisement-interval	368
neighbor advertisement-start	369
neighbor allowas-in	369
neighbor default-originate	370
neighbor description	371
neighbor distribute-list	372
neighbor ebgp-multihop	373
neighbor fall-over	374
neighbor local-as	375
neighbor maximum-prefix	376
neighbor next-hop-self	377
neighbor password	377
neighbor peer-group (assigning peers)	378
neighbor peer-group (creating group)	380
neighbor peer-group passive	380
neighbor remote-as	381
neighbor remove-private-as	382
neighbor route-map	383
neighbor route-reflector-client	384
neighbor sender-side-loopdetect	385
neighbor send-community	386
neighbor shutdown	387
neighbor soft-reconfiguration inbound	388
neighbor timers	389
neighbor timers extended	390
neighbor update-source	390
neighbor weight	391
network	392
network backdoor	393
permit bandwidth	394
redistribute	395
redistribute ospf	396
router bgp	397
shutdown all	398
shutdown address-family-ipv4–multicast	398
shutdown address-family-ipv4–unicast	398
shutdown address-family-ipv6–unicast	399
set extcommunity bandwidth	399
show capture bgp-pdu neighbor	400
show config	401
show ip bgp	402
show ip bgp cluster-list	405
show ip bgp community	407
show ip bgp community-list	409
show ip bgp dampened-paths	410
show ip bgp detail	412
show ip bgp extcommunity-list	413
show ip bgp filter-list	414
show ip bgp flap-statistics	416
show ip bgp inconsistent-as	417
show ip bgp neighbors	419
show ip bgp next-hop	422
show ip bgp paths	423
show ip bgp paths community	425
show ip bgp peer-group	426
show ip bgp regexp	427
show ip bgp summary	429
show running-config bgp	431
timers bgp	432
timers bgp extended	432
MBGP Commands	433
debug ip bgp dampening	433
distance bgp	434
show ip bgp dampened-paths	435
BGP Extended Communities (RFC 4360)	436
set extcommunity rt	436
set extcommunity soo	437
show ip bgp paths extcommunity	438
show ip extcommunity-list	439
IPv6 BGP Commands	440
clear ip bgp ipv6 unicast soft	440
debug ip bgp ipv6 unicast soft-reconfiguration	441
ipv6 prefix-list	441
neighbor soft-reconfiguration inbound	442
show ipv6 prefix-list	443
IPv6 MBGP Commands	443
show ipv6 mbgproutes	443
Content Addressable Memory (CAM)	445
CAM Profile Commands	445
cam-acl (Configuration)	445
cam-acl-egress	448
cam-optimization	448
cam-threshold	449
show cam-acl	450
show cam-usage	452
test cam-usage	453
Control Plane Policing (CoPP)	455
control-plane-cpuqos	455
service-policy rate-limit-cpu-queues	456
service-policy rate-limit-protocols	456
ip unknown-unicast	457
ipv6 unknown-unicast	458
show cpu-queue rate cp	458
show ip protocol-queue-mapping	459
show ipv6 protocol-queue-mapping	460
show mac protocol-queue-mapping	461
Debugging and Diagnostics	463
Diagnostics and Monitoring Commands	463
logging coredump stack-unit	463
Offline Diagnostic Commands	464
diag stack-unit	464
offline stack-unit	465
online stack-unit	466
Hardware Commands	467
clear hardware stack-unit	467
clear hardware system-flow	468
clear hardware vlan-counters	468
hardware watchdog	469
show hardware mac	469
show hardware ip	470
show hardware stack-unit	471
show hardware buffer interface	478
show hardware counters interface	480
show hardware buffer-stats-snapshot	481
show hardware stack-unit buffer-stats-snapshot (Total Buffer Information)	482
show hardware system-flow	484
show hardware vlan-counters	485
show hardware drops	486
Dynamic Host Configuration Protocol (DHCP)	489
Commands to Configure the System to be a DHCP Server	489
clear ip dhcp	489
debug ip dhcp server	490
debug ipv6 dhcp	490
default-router	491
disable	492
dns-server	492
domain-name	493
excluded-address	494
hardware-address	494
host-address	495
ip dhcp server	495
lease	496
netbios-name-server	497
netbios-node-type	497
network	498
pool	499
show ip dhcp binding	499
show ip dhcp configuration	500
show ip dhcp conflict	501
show ip dhcp server	502
Commands to Configure Secure DHCP	502
arp inspection	502
arp inspection-limit	503
arp inspection-trust	503
clear ip dhcp snooping	504
clear ipv6 dhcp snooping binding	505
ip dhcp relay	506
ip dhcp snooping	507
ipv6 dhcp snooping	507
ipv6 dhcp snooping vlan	508
ip dhcp snooping binding	508
IPv6 DHCP Snooping Binding	510
ip dhcp snooping database	510
ipv6 dhcp snooping database write-delay	511
ip dhcp snooping database renew	512
ipv6 dhcp snooping database renew	512
ip dhcp snooping trust	513
ipv6 dhcp snooping trust	513
ip dhcp source-address-validation	514
ip dhcp relay information-option	515
ip dhcp relay source-interface	516
ipv6 dhcp relay source-interface	516
ip dhcp snooping verify mac-address	517
ipv6 dhcp snooping verify mac-address	518
ip helper-address	518
ipv6 helper-address	519
show ip dhcp snooping	520
show ipv6 dhcp snooping	522
Commands to Configure DNS	523
ip name-server	523
ip domain-name	523
ip domain-list	524
ip host	525
clear host	526
Equal Cost Multi-Path (ECMP)	527
ecmp-group	527
hash-algorithm	528
ip ecmp-group	530
ip ecmp weighted	530
link-bundle-monitor enable	531
link-bundle-distribution trigger-threshold	532
show config	532
show link-bundle distribution	533