Dell Force10 MXL Blade Reference Manual page 106

Parameters
Defaults
Command Modes
Command
History
106 | Access Control Lists (ACL)
source
mask
any
host ip-address
dscp
bit
operator
port port
destination
mask
count
byte
order
fragments
Not configured.
CONFIGURATION-IP ACCESS-LIST-EXTENDED
Version 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.
any
Enter the keyword to specify that all routes are subject to the filter.
host
Enter the keyword followed by the IP address to specify a host IP address.
Enter this keyword to deny a packet based on DSCP value.
Range: 0-63
Enter a flag or combination of bits:
ack:
• acknowledgement field
fin
• : finish (no more data from the user)
psh:
• push function
rst:
• reset the connection
syn:
• synchronize sequence numbers
urg:
• urgent field
(OPTIONAL) Enter one of the following logical operand:
eq
• = equal to
neq
• = not equal to
gt
• = greater than
lt
• = less than
range
• = inclusive range of ports (you must specify two ports for the
command parameter.
Enter the application layer port number. Enter two port numbers if using the
range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP
Enter the IP address of the network or host to which the packets are sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.
(OPTIONAL) Enter the keyword
filter.
(OPTIONAL) Enter the keyword
(OPTIONAL) Enter the keyword
entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower
order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by
default (255).
fragments
Enter the keyword
count
to count packets processed by the
byte
to count bytes processed by the filter.
order
to specify the QoS priority for the ACL
to use ACLs to control packet fragments.
port