Dell Force10 S4810P Reference Manual page 910

byte
log
monitor
Defaults Not configured.
Command Modes ACCESS-LIST
Command History
Version 8.4.2.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Usage
The C-Series cannot count both packets and bytes, so when you enter the count byte
Information
options, only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators
(gt, lt, range) may require more than one entry. The range of ports is configured in the CAM
based on bitmask boundaries; the space required depends on exactly what ports are included
in the range.
Example
An ACL rule with a TCP port range of 4000 - 8000 uses eight entries in the CAM:
Rule#
1
2
3
4
5
6
7
8
Total Ports: 4001
Example
An ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1
Total Ports: 1024
Related
deny
Commands
deny tcp
910
(OPTIONAL) Enter the keyword byte to count bytes processed by
the filter.
(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
Supported on Jumbo-enabled line cards only.
(OPTIONAL) Enter the keyword monitor to monitor traffic on the
monitoring interface specified in the flow-based monitoring session
along with the filter operation.
Introduced on the S-Series.
Introduced on the E-Series TeraScale.
Introduced on the C-Series.
Introduced on the E-Series TeraScale. Added the monitor option.
Data
0000111110100000 1111111111100000 4000
0000111111000000 1111111111000000 4032
0001000000000000 1111100000000000 4096
0001100000000000 1111110000000000 6144
0001110000000000 1111111000000000 7168
0001111000000000 1111111100000000 7680
0001111100000000 1111111111000000 7936
0001111101000000 1111111111111111 8000
Data
0000000000000000 1111110000000000 0
– assigns a filter to deny IP traffic.
– assigns a deny filter for TCP traffic.
Mask From
Mask From
To #Covered
4031 32
4095 64
6143 2048
7167 1024
7679 512
7935 256
7999 64
8000 1
To #Covered
1023 1024