Dell EMC SmartFabric OS10 User Guide Release 10.5.1

To create an ingress ACL filter, use the ip access-group command in EXEC mode. To configure ingress, use the in keyword. Apply rules to the ACL with the ip access-list acl-name command. To view the access-list, use the show access-lists command.

1. Apply an ingress access-list on the interface in INTERFACE mode.

   ip access-group access-group-name in

2. Return to CONFIGURATION mode.

   exit

3. Create the access-list in CONFIGURATION mode.

   ip access-list access-list-name

4. Create the rules for the access-list in ACCESS-LIST mode.

   permit ip host ip-address host ip-address count

Apply ACL rules to access-group and view access-list

OS10(config)# interface ethernet 1/1/28
OS10(conf-if-eth1/1/28)# ip access-group abcd in
OS10(conf-if-eth1/1/28)# exit
OS10(config)# ip access-list acl1 
OS10(conf-ipv4-acl)# permit ip host 10.1.1.1 host 100.1.1.1 count

Configuration notes

Dell EMC PowerSwitch S5200-ON Series:

When you configure QoS service-policy on an S5200-ON switch that is in a VLT setup with MAC and IP ACLs configured, an error appears. This issue occurs because of ACL group width limitation in the S5200-ON series switches. VLT, IP, MAC, and QoS ACLs require double-width ACL table slice. The S5200-ON series switches support only three applications that require double-wide ACL table slice at a time. An error appears because the QoS application configuration requires a fourth ACL table slice.