Ip Access-List Extended - Dell Force10 MXL Blade Reference Manual

For example, an ACL rule with TCP port range 4000 - 8000 will use eight entries in the CAM:
Rule#
1
2
3
4
5
6
7
8
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1
Total Ports: 1024
Related
deny
Commands
deny tcp

ip access-list extended

Name (or select) an extended IP access list (IP ACL) based on IP addresses or protocols.
Syntax ip access-list extended access-list-name
To delete an access list, use the no ip access-list extended access-list-name command.
Parameters
access-list-name
Defaults
All access lists contain an implicit deny any; that is, if no match occurs, the packet is dropped.
Command Modes
CONFIGURATION
Command
Version 8.3.16.1
History
Usage The number of entries allowed per ACL is hardware-dependent. For detailed specification on entries
Information
allowed per ACL, refer to your switch documentation.
Example Figure 6-5. ip access-list extended Command Example
FTOS(conf)#ip access-list extended TESTListEXTEND
FTOS(config-ext-nacl)#
Related
ip access-list standard
Commands
resequence access-list
Data
0000111110100000 1111111111100000 4000
0000111111000000 1111111111000000 4032
0001000000000000 1111100000000000 4096
0001100000000000 1111110000000000 6144
0001110000000000 1111111000000000 7168
0001111000000000 1111111100000000 7680
0001111100000000 1111111111000000 7936
0001111101000000 1111111111111111 8000
Data
0000000000000000 1111110000000000 0
Assigns a deny filter for IP traffic.
Assigns a deny filter for TCP traffic.
Enter a string up to 140 characters long as the access list name.
Introduced on MXL 10/40GbE Switch IO Module
Mask From To
4031
4095
6143
7167
7679
7935
7999
8000
Mask From To
1023
Configures a standard IP access list.
Displays the current configuration.
#Covered
32
64
2048
1024
512
256
64
1
#Covered
1024
Access Control Lists (ACL) | 109