Resequence Access-List - Dell S6100 Configuration Manual

Hide thumbs Also See for S6100:
Table of Contents

Advertisement

Version
9.10(0.0)
9.8(1.0)
9.0.2.0
8.4.2.1
8.2.1.0
7.8.1.0
7.4.1.0
Usage Information
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range)
may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the
space required depends on exactly what ports are included in the range.
Example
An ACL rule with a TCP port range 4000 - 8000 uses eight entries in the CAM:
Rule# Data
1 0000111110100000
2 0000111111000000
3 0001000000000000
4 0001100000000000
5 0001110000000000
6 0001111000000000
7 0001111100000000
8 0001111101000000
Total Ports: 4001
Example
An ACL rule with a TCP port lt 1023 takes only one entry in the CAM:
Rule#
1
Total Ports: 1024
Related Commands
permit
permit tcp

resequence access-list

Re-assign sequence numbers to entries of an existing access-list.
S-Series
Syntax
resequence access-list {ipv4 | ipv6 | mac} {access-list-name StartingSeqNum
Step-to-Increment}
Description
Introduced on the S6100–ON.
Introduced on the Z9100–ON.
Introduced on the S6000.
Introduced on the S-Series.
Introduced on the E-Series ExaScale.
Introduced on the C-Series.
Introduced on the E-Series TeraScale. Added the monitor option.
1111111111100000
1111111111000000
1111100000000000
1111110000000000
1111111000000000
1111111100000000
1111111111000000
1111111111111111
Data
0000000000000000 1111110000000000 0
– assigns a permit filter for IP packets.
– assigns a permit filter for TCP packets.
Mask
From
4000
4032
4096
6144
7168
7680
7936
8000
Mask
From
To
#Covered
4031
32
4095
64
6143
2048
7167
1024
7679
512
7935
256
7999
64
8000
1
To #Covered
1023
1024
Access Control Lists (ACL)
235

Advertisement

Table of Contents
loading

Table of Contents