Counting Acl Hits - Dell Force10 MXL Blade Configuration Manual

You can apply the same ACL to different interfaces and that changes its functionality. For example, you
can take ACL "ABCD", and apply it using the
apply the same ACL using the
For more information about Layer-3 interfaces, refer to Interfaces.
To apply an IP ACL (standard or extended) to a physical or port channel interface, follow these steps, in
INTERFACE mode:
Step Command Syntax
1 interface interface slot/port
2 ip address ip-address
3 ip access-group access-list-name {in
| out} [implicit-permit] [vlan
vlan-range]
4 ip access-list [standard | extended]
name
To view which IP ACL is applied to an interface, use the
INTERFACE mode or the
Figure 5-12. Command example:
FTOS(conf-if)#show conf
!
interface TenGigabitEthernet 0/0
ip address 10.2.1.100 255.255.255.0
ip access-group nimule in
no shutdown
FTOS(conf-if)#
Use only standard ACLs in the

Counting ACL Hits

You can view the number of packets matching the ACL by using the
entries. In the MXL Switch, either count (packets) or count (bytes) can be configured. However, for an
ACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at
any given time.
82
| Access Control Lists (ACLs)
keyword and it becomes an ingress access list. If you
in
keyword, it becomes an egress access list.
out
Command Mode
CONFIGURATION
INTERFACE
INTERFACE
INTERFACE
command in EXEC mode.
show running-config
command in the INTERFACE Mode
show config
command to filter traffic on Telnet sessions.
access-class
Purpose
Enter the interface number.
Configure an IP address for the interface, placing
it in Layer-3 mode.
Apply an IP ACL to traffic entering or exiting an
interface.
out: configure the ACL to filter outgoing traffic.
Note: The number of entries allowed per
•
ACL is hardware-dependent.
Apply rules to the new ACL.
command (Figure 5-12)
show config
option when creating ACL
count
in