Advertisement
byte
log
dscp
order
monitor
fragments
Defaults
Not configured.
Command Modes
CONFIGURATION-EXTENDED-ACCESS-LIST
Command
Version 8.3.1.0
History
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
Usage
The order option is relevant in the context of the Policy QoS feature only. See the "Quality of
Information
Service" chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on
how many packets match the log entry and at what rate, the CP may become busy as it has to log these
packets' details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte
options, only bytes are incremented.
The monitor option is relevant in the context of flow-based monitoring only. See the
Monitoring.
Related
ip access-list extended
Commands
permit tcp
permit udp
(OPTIONAL) Enter the keyword
(OPTIONAL, E-Series only) Enter the keyword
the log.
(OPTIONAL) Enter the keyword
(OPTIONAL) Enter the keyword
for the ACL entry.
Range:
Default:
(OPTIONAL) Enter the keyword
traffic that you want to monitor and the ACL in which you are creating the rule
will be applied to the monitored interface. For details, see the section
"Flow-based Monitoring" in the Port Monitoring chapter of the FTOS
Configuration Guide.
Enter the keyword
Add DSCP value for ACL matching.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Added support for non-contiguous mask and added the
Expanded to include the optional QoS
Note:
When ACL logging and byte counters are configured simultaneously, byte counters
may display an incorrect value. Configure packet counters with logging instead.
byte
dcsp
order
0-254 (where 0 is the highest priority and 254 is the lowest; lower
order numbers have a higher priority)
If the order keyword is not used, the ACLs have the lowest order by
default (255).
monitor
fragments
to use ACLs to control packet fragments.
order
Create an extended ACL.
Assign a permit filter for TCP packets.
Assign a permit filter for UDP packets.
to count bytes processed by the filter.
log
to enter ACL matches in
to match to the IP DSCP values.
to specify the QoS order of priority
when the rule is describing the
monitor
option.
priority for the ACL entry.
Chapter 44, Port
Access Control Lists (ACL) | 233
Advertisement
