Cisco Nexus 7000 Series Command Reference Manual page 368

fragments
switch(config)# ip access-list lab-acl
switch(config-acl)# fragments permit-all
This example shows the lab-acl IPv4 ACL, which includes the fragments command. The fragments command
appears at the beginning of the ACL for convenience, but the device permits noninitial fragments only after
they do not match all other explicit rules in the ACL.
switch(config-acl)# show ip access-lists lab-acl
IP access list lab-acl
fragments permit-all
10 permit tcp 10.0.0.0/8 172.28.254.254/24 eq tacacs
20 permit tcp 10.0.0.0/8 172.28.254.154/24 eq tacacs
30 permit tcp 10.0.0.0/8 172.28.254.54/24 eq tacacs
Related Commands
Command
deny (IPv4)
deny (IPv6)
permit (IPv4)
permit (IPv6)
show ip access-list
show ipv6 access-list
Cisco Nexus 7000 Series Security Command Reference
342
Description
Configures a deny rule in an IPv4 ACL.
Configures a deny rule in an IPv6 ACL.
Configures a permit rule in an IPv4 ACL.
Configures a permit rule in an IPv6 ACL.
Displays all IPv4 ACLs or a specific IPv4 ACL.
Displays all IPv6 ACLs or a specific IPv6 ACL.
F Commands