Table of Contents
Advertisement
•
name — Access list name. (Range: Valid IP access-list name up to 31
characters in length)
•
in — The access list is applied to ingress packets.
out—The access list is applied to egress packets.
•
•
control-plane—The access list is applied to egress control plane packets
only. This is only available in Global Configuration mode.
•
seqnum — Precedence for this interface and direction. A lower sequence
number has higher precedence. Range: 1 – 4294967295. Default is 1.
Default Configuration
This command has no default configuration.
Command Mode
Global Configuration and Interface Configuration (Ethernet, VLAN, or Port
Channel) modes
User Guidelines
The Global Configuration mode command configures the ACL on all
physical and LAG interfaces, whereas the interface mode command does so
for the interface.
Dell EMC Networking switches support configuration of multiple access
groups. Packets are matched against group entries, from lowest sequence
number to highest. Configuring an access-group, using the same sequence
number as an existing entry, replaces the original group entry.
If the access-list specified in the command does not exist, an error is given.
The ACLs in the access-group are configured in hardware when the interface
becomes active. Resource contention issues will only become apparent at that
time. It is recommended that ACLs be configured on an active interface as a
check prior to deployment in the network.
The optional control-plane keyword allows application of an ACL on the CPU
port. Control-plane match actions occur in the egress direction. System level
rules are applied on ingress, after application of any user defined ingress rules,
therefore, it is not possible to rate limit packets matching the system defined
rules with an ACL having a control-plane target. Use the rate-limit cpu
command to reduce the effects of low priority traffic on the switch CPU.
Layer 2 Switching Commands
274
Advertisement
Table of Contents
