Treceți la conținutul principal
Deconectare

Bun venit la Dell

Contul meu
  • Plasaţi comenzi rapid şi simplu
  • Vizualizaţi comenzile şi urmăriţi starea transportului
  • Creaţi şi accesaţi o listă cu produsele dvs.
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Autentificare Creaţi un cont Autentificare la Premier Autentificare la programul pentru parteneri
Contactaţi-ne

Dell PowerEdge FN I/O Module Configuration Guide 9.10(0.0)

PDF

IP Fragments ACL Examples

The following examples show how you can use ACL commands with the fragment keyword to filter fragmented packets.

Example of Permitting All Packets on an Interface

The following configuration permits all packets (both fragmented and non-fragmented) with destination IP 10.1.1.1. The second rule does not get hit at all. 

Dell(conf)#ip access-list extended ABC
                                 Dell(conf-ext-nacl)#permit ip any 10.1.1.1/32
                                 Dell(conf-ext-nacl)#
                                 deny ip any 10.1.1.1./32 fragments
                                 Dell(conf-ext-nacl)

To deny the second/subsequent fragments, use the same rules in a different order. These ACLs deny all second and subsequent fragments with destination IP 10.1.1.1 but permit the first fragment and non-fragmented packets with destination IP 10.1.1.1. 

Dell(conf)#ip access-list extended ABC
                                 Dell(conf-ext-nacl)#
                                 deny ip any 10.1.1.1/32 fragments
                                 Dell(conf-ext-nacl)#permit ip any 10.1.1.1/32
                                 Dell(conf-ext-nacl)

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\