Advertisement
Command
Version 8.4.2.1
History
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Usage
The C-Series cannot count both packets and bytes, so when you enter the count byte options, only
Information
bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt,
lt, range) may require more than one entry. The range of ports is configured in the CAM based on
bitmask boundaries; the space required depends on exactly what ports are included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule#
1
2
3
4
5
6
7
8
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1
Total Ports: 1024
Related
permit
Commands
permit udp
permit udp
c e s
Configure a filter to pass UDP packets meeting the filter criteria.
Syntax
permit udp {source address mask | any | host ipv6-address} [operator port [port]]
{destination address | any | host ipv6-address} [operator port [port]] [count [byte]] | [log]
[monitor]
To remove this filter, you have two choices:
•
•
Introduced on the S-Series
Introduced on the E-Series ExaScale
Introduced on the C-Series
Introduced on the E-Series TeraScale
monitor
Added
Data
0000111110100000 1111111111100000 4000
0000111111000000 1111111111000000 4032
0001000000000000 1111100000000000 4096
0001100000000000 1111110000000000 6144
0001110000000000 1111111000000000 7168
0001111000000000 1111111100000000 7680
0001111100000000 1111111111000000 7936
0001111101000000 1111111111111111 8000
Data
0000000000000000 1111110000000000 0
Use the no seq sequence-number command syntax if you know the filter's sequence number
or
Use the no permit udp {source address mask | any | host ipv6-address} {destination
address | any | host ipv6-address} command.
option
Mask
From
Mask
From
Assign a permit filter for IPv6 packets.
Assign a permit filter for UDP packets.
To
#Covered
4031
32
4095
64
6143
2048
7167
1024
7679
512
7935
256
7999
64
8000
1
To
#Covered
1023
1024
IPv6 Access Control Lists (IPv6 ACLs) | 697
Advertisement
