Reference Guide

Content Addressable Memory (CAM) chapter in the C9000 Series Configuration
Guide.
If you configure an extended IP ACL to be used only to filter protocol traffic for
CoPP, you must enter the keyword cpu-qos.
Example
Dell(conf)#ip access-list extended TESTListEXTEND
Dell(config-ext-nacl)#
Related
Commands
ip access-list standard — configures a standard IP access list.
show config — displays the current configuration.
permit
To pass IP packets meeting the filter criteria, configure a filter.
C9000 Series
Syntax
permit {source mask | any | host ip-address} {destination mask
| any | host ip-address} [count [bytes]] [dscp value] [order]
[fragments] [log [interval minutes] [threshold-in-msgs [count]]
[monitor]
To remove this filter, you have two choices:
• Use the no seq sequence-number command if you know the filter’s
sequence number.
• Use the no deny {source mask | any | host ip-address}
{destination mask | any | host ip-address} command.
Parameters
source Enter the IP address in dotted decimal format of the
network from which the packet was sent.
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or
A.B.C.D. The mask, when specified in A.B.C.D format, may
be either contiguous or non-contiguous.
any Enter the keyword any to specify that all routes are subject
to the filter.
host ip-address Enter the keyword host then the IP address to specify a
host IP address or hostname.
destination Enter the IP address of the network or host to which the
packets are sent.
count (OPTIONAL) Enter the keyword count to count packets
processed by the filter.
bytes (OPTIONAL) Enter the keyword bytes to count bytes
processed by the filter.
Access Control Lists (ACL)
283