Advertisement
Defaults
Command Modes
Command
History
Usage
Information
Related
Commands
690
|
IPv6 Access Control Lists (IPv6 ACLs)
count
byte
log
monitor
Not configured.
ACCESS-LIST
Version 8.4.2.1
Introduced on the S-Series
Version 8.2.1.0
Introduced on the E-Series ExaScale
Version 7.8.1.0
Introduced on the C-Series
Version 7.4.1.0
Introduced on the E-Series TeraScale
Added
The C-Series cannot count both packets and bytes, so when you enter the count byte options, only
bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt,
lt, range) may require more than one entry. The range of ports is configured in the CAM based on
bitmask boundaries; the space required depends on exactly what ports are included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule#
Data
1
0000111110100000 1111111111100000 4000
2
0000111111000000 1111111111000000 4032
3
0001000000000000 1111100000000000 4096
4
0001100000000000 1111110000000000 6144
5
0001110000000000 1111111000000000 7168
6
0001111000000000 1111111100000000 7680
7
0001111100000000 1111111111000000 7936
8
0001111101000000 1111111111111111 8000
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
Data
1
0000000000000000 1111110000000000 0
Total Ports: 1024
deny
Assign a filter to deny IP traffic.
deny udp
Assign a filter to deny UDP traffic.
(OPTIONAL) Enter the keyword
filter.
(OPTIONAL) Enter the keyword
(OPTIONAL) Enter the keyword
Supported on Jumbo-enabled line cards only.
(OPTIONAL) Enter the keyword
monitoring interface specified in the flow-based monitoring session along with
the filter operation.
monitor
option
Mask
Mask
count
to count packets processed by the
byte
to count bytes processed by the filter.
log
to enter ACL matches in the log.
monitor
to monitor traffic on the
From
To
#Covered
4031
32
4095
64
6143
2048
7167
1024
7679
512
7935
256
7999
64
8000
1
From
To
#Covered
1023
1024
Advertisement
