Dell Command Line Reference Guide for the S4048–ON System 9.14.2.4

To remove a remark, use the no remark command.

remark-number

(Optional) Enter the remark number. The range is from 0 to 65535 for MAC ACL and 0 to 4294967290 for IP ACL.

NOTE You can use the same sequence number for the remark and an ACL rule.

description

Enter a description of up to 80 characters.

• CONFIGURATION-STANDARD-ACCESS-LIST
• CONFIGURATION-EXTENDED-ACCESS-LIST
• CONFIGURATION-MAC ACCESS LIST-STANDARD
• CONFIGURATION-MAC ACCESS LIST-EXTENDED

This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide.

Version

Description

9.14(1.0)

Introduced the remark number as an optional value on S4810 and S4820T.

9.14.0.0

Made the remark number as an optional value.

9.10(0.1)

Introduced on the S6010-ON and S4048T-ON.

9.10(0.0)

Introduced on the S3148.

9.10(0.0)

Introduced on the S6100-ON.

9.8(2.0)

Introduced on the S3100 series.

9.8(1.0)

Introduced on the Z9100–ON.

9.8(0.0P5)

Introduced on the S4048-ON.

9.8(0.0P2)

Introduced on the S3048-ON.

9.7(0.0)

Introduced on the S6000–ON.

9.2(1.0)

Introduced on the Z9500.

9.0.2.0

Introduced on the S6000.

8.3.19.0

Introduced on the S4820T.

8.3.11.1

Introduced on the Z9000.

8.3.7.0

Introduced on the S4810.

8.1.1.0

Introduced on the E-Series.

7.6.1.0

Introduced on the S-Series.

7.5.1.0

Introduced on the C-Series.

6.4.1.0

Introduced on the E-Series.

The remark command is available in each ACL mode. You can configure up to 4294967291 remarks for a given IP ACL and 65536 remarks for a given MAC ACL.

You can include a remark with or without a remark number. If you do not enter a remark number, the remark inherits the sequence number of the last ACL rule. If there is no ACL rule when you enter a remark, the remark takes sequence number 5. If you configure two remarks with the same sequence number and different strings, the second one replaces the first string. You cannot configure two or more remarks with the same string and different sequence numbers.

To remove a remark, use the no remark command with or without the sequence number. If there is a matching string, the system deletes the remark.

The following example shows the use of the remark command twice within CONFIGURATION-STANDARD-ACCESS-LIST mode. The remark precedes the rule in the running configuration because it is assumed that the remark is for the rule with the same sequence number, or the group of rules that follow the remark.

DellEMC(config-std-nacl)# remark 10 Deny rest of the traffic
DellEMC(config-std-nacl)# remark 5 Permit traffic from XYZ Inc.
DellEMC(config-std-nacl)# show config
!
ip access-list standard test
remark 5 Permit traffic from XYZ Inc.
seq 5 permit 1.1.1.0/24
remark 10 Deny rest of the traffic
seq 10 deny any
DellEMC(config-std-nacl)#

The following example shows adding a remark without a sequence number:

DELLEMC(config-ext-nacl)#permit ip any any
DELLEMC(config-ext-nacl)#remark permit any ip
DELLEMC(config-ext-nacl)#show c
!
ip access-list extended testac
 seq 5 permit ip any any
 remark 5 permit any ip

The following example shows that the system displays an error message when the same remark string is used with different remark numbers.

DELLEMC(config-ext-nacl)#seq 100 permit ip any any
DELLEMC(config-ext-nacl)#remark 10 permit any ip
DELLEMC(config-ext-nacl)#remark permit any ip
DELLEMC(config-ext-nacl)#% Error : Remark string already exists

• show config — display the current ACL configuration.