Dell PowerEdge FN I/O Module Configuration Guide 9.10(0.0)

Example of Permitting All Packets on an Interface

The following configuration permits all packets (both fragmented and non-fragmented) with destination IP 10.1.1.1. The second rule does not get hit at all.

Dell(conf)#ip access-list extended ABC
                                 Dell(conf-ext-nacl)#permit ip any 10.1.1.1/32
                                 Dell(conf-ext-nacl)#
                                 deny ip any 10.1.1.1./32 fragments
                                 Dell(conf-ext-nacl)
                              

To deny the second/subsequent fragments, use the same rules in a different order. These ACLs deny all second and subsequent fragments with destination IP 10.1.1.1 but permit the first fragment and non-fragmented packets with destination IP 10.1.1.1.

Dell(conf)#ip access-list extended ABC
                                 Dell(conf-ext-nacl)#
                                 deny ip any 10.1.1.1/32 fragments
                                 Dell(conf-ext-nacl)#permit ip any 10.1.1.1/32
                                 Dell(conf-ext-nacl)