Dell EMC SmartFabric OS10 User Guide Release 10.5.0

User-provided sequence number

• Enter IP ACCESS LIST mode by creating an IP ACL in CONFIGURATION mode.

  ip access-list access-list-name

• Configure a drop or forward filter in IPV4-ACL mode.

  seq sequence-number {deny | permit | remark} {ip-protocol-number | icmp | ip | protocol | tcp | udp} {source prefix | source mask | any | host} {destination mask | any | host ip-address} [count [byte]] [fragments]

Auto-generated sequence number

If you are creating an ACL with only one or two filters, you can let the system assign a sequence number based on the order you configure the filters. The system assigns sequence numbers to filters using multiples of ten values.

• Configure a deny or permit filter to examine IP packets in IPV4-ACL mode.

  {deny | permit} {source mask | any | host ip-address} [count [byte]] [fragments]

• Configure a deny or permit filter to examine TCP packets in IPV4-ACL mode.

  {deny | permit} tcp {source mask] | any | host ip-address}} [count [byte]] [fragments]

• Configure a deny or permit filter to examine UDP packets in IPV4-ACL mode.

  {deny | permit} udp {source mask | any | host ip-address}} [count [byte]] [fragments]

Assign sequence number to filter

OS10(config)# ip access-list acl1
OS10(conf-ipv4-acl)# seq 5 deny tcp any any capture session 1 count 

View ACLs and packets processed through ACL

OS10# show ip access-lists in
Ingress IP access-list acl1
 Active on interfaces :
  ethernet1/1/5
 seq 5 permit ip any any count (10000 packets)