Dell Force10 S4810P Configuration Manual page 114

TCP packets: To create a filter for TCP packets with a specified sequence number, use these commands in
the following sequence, starting in the CONFIGURATION mode:
Step Command Syntax
1
ip access-list extended
access-list-name
2
When you use the
many packets match the log entry and at what rate, the CP may become busy as it has to log these packets'
details.
UDP packets: To create a filter for UDP packets with a specified sequence number, use these commands
in the following sequence, starting in the CONFIGURATION mode:
Step Command Syntax
1 ip access-list extended
access-list-name
2
When you create the filters with a specific sequence number, you can create the filters in any order and the
filters are placed in the correct order.
Note: When assigning sequence numbers to filters, keep in mind that you might need to insert a
new filter. To prevent reconfiguring multiple filters, assign sequence numbers in multiples of five or
another number.
114
| Access Control Lists (ACLs)
seq sequence-number
{ | }
deny permit tcp
{ | |
any
source mask
}}
host ip-address
[ [ ] | ]
count byte log
[ ] [
order monitor]
[ ]
fragments
keyword, CP processor logs details about the packets that match. Depending on how
log
seq
sequence-number
{ | }
deny permit
{
ip-protocol-number
} { |
udp
source mask
| }
any host ip-address
{ |
destination mask
| }
any host ip-address
[ [ ]]
operator port port
[ [ ] | ]
count byte log
[ ] [ ]
order monitor
[ ]
fragments
Command Mode
CONFIGURATION
CONFIG-EXT-NACL
Command Mode Purpose
CONFIGURATION Create a extended IP ACL and assign it a unique
name.
CONFIG-EXT-NACL Configure an extended IP ACL filter for UDP
packets.
•
Purpose
Create an extended IP ACL and assign it a
unique name.
Configure an extended IP ACL filter for TCP
packets.
• log and monitor options are supported on
E-Series only.
log and monitor options are supported on
E-Series only.