Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell EMC SmartFabric OS10 User Guide Release 10.5.1

PDF

Assign sequence number to filter

IP ACLs filter on source and destination IP addresses, IP host addresses, TCP addresses, TCP host addresses, UDP addresses, and UDP host addresses. Traffic passes through the filter by filter sequence. Configure the IP ACL by first entering IP ACCESS-LIST mode and then assigning a sequence number to the filter.

User-provided sequence number

  • Enter IP ACCESS LIST mode by creating an IP ACL in CONFIGURATION mode.
    ip access-list access-list-name
  • Configure a drop or forward filter in IPV4-ACL mode.
    seq sequence-number {deny | permit | remark} {ip-protocol-number | icmp | ip | protocol | tcp | udp} {source prefix | source mask | any | host} {destination mask | any | host ip-address} [count [byte]] [fragments]

Auto-generated sequence number

If you are creating an ACL with only one or two filters, you can let the system assign a sequence number based on the order you configure the filters. The system assigns sequence numbers to filters using multiples of ten values.

  • Configure a deny or permit filter to examine IP packets in IPV4-ACL mode.
    {deny | permit} {source mask | any | host ip-address} [count [byte]] [fragments]
  • Configure a deny or permit filter to examine TCP packets in IPV4-ACL mode.
    {deny | permit} tcp {source mask] | any | host ip-address}} [count [byte]] [fragments]
  • Configure a deny or permit filter to examine UDP packets in IPV4-ACL mode.
    {deny | permit} udp {source mask | any | host ip-address}} [count [byte]] [fragments]

Assign sequence number to filter

OS10(config)# ip access-list acl1
OS10(conf-ipv4-acl)# seq 5 deny tcp any any capture session 1 count

View ACLs and packets processed through ACL

OS10# show ip access-lists in
Ingress IP access-list acl1
 Active on interfaces :
  ethernet1/1/5
 seq 5 permit ip any any count (10000 packets)

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\