Configuration Example For Extended Named Acls; Preserving User Input For Acl Tcp/Udp Port Numbers - Dell PowerConnect B-FCXs Configuration Manual

16

Preserving user input for ACL TCP/UDP port numbers

The 802.1p-priority-matching option inspects the 802.1p bit in the ACL that can be used with
adaptive rate limiting. Enter a value from 0 – 7. For details, refer to
ACL for adaptive rate limiting"
The dscp-marking option enables you to configure an ACL that marks matching packets with a
specified DSCP value Enter a value from 0 – 63. Refer to
(DSCP marking)"
The dscp-matching option matches on the packet's DSCP value. Enter a value from 0 – 63. This
option does not change the packet's forwarding priority through the device or mark the packet.
Refer to
The log parameter enables SNMP traps and Syslog messages for packets denied by the ACL:
•
The traffic-policy option enables the device to rate limit inbound traffic and to count the packets
and bytes per packet to which ACL permit or deny clauses are applied. For configuration
procedures and examples, refer to the chapter

Configuration example for extended named ACLs

To configure an extended named ACL, enter commands such as the following.
PowerConnect(config)#ip access-list extended "block Telnet"
PowerConnect(config-ext-nACL)#deny tcp host 209.157.22.26 any eq telnet log
PowerConnect(config-ext-nACL)#permit ip any any
PowerConnect(config-ext-nACL)#exit
PowerConnect(config)#int eth 1/1
PowerConnect(config-if-1/1)#ip access-group "block Telnet" in
The options at the ACL configuration level and the syntax for the ip access-group command are the
same for numbered and named ACLs and are described in
on page 556 and
Preserving user input for ACL TCP/UDP port numbers
ACL implementations automatically display the TCP/UDP port name instead of the port number,
regardless of user preference, unless the device is configured to preserve user input. When the
option to preserve user input is enabled, the system will display either the port name or the
number.
To enable this feature, enter the following command.
PowerConnect(config)#ip preserve-ACL-user-input-format
Syntax: ip preserve-ACL-user-input-format
566
on page 580.
"DSCP matching" on page 581.
You can enable logging on ACLs and filters that support logging even when the ACLs and filters
are already in use. To do so, re-enter the ACL or filter command and add the log parameter to
the end of the ACL or filter. The software replaces the ACL or filter command with the new one.
The new ACL or filter, with logging enabled, takes effect immediately.
"Configuring extended numbered ACLs"
on page 765.
"Configuring Traffic Policies"
"Inspecting the 802.1p bit in the
"Using an IP ACL to mark DSCP values
on page 759.
"Configuring extended numbered ACLs"
on page 556.
PowerConnect B-Series FCX Configuration Guide
53-1002266-01