Administrator Guide

Access Control Lists 639
• On the Dell Networking N4000 Series switches, the IPv6 ACL fragment
keyword matches only on the first two IPv6 extension headers for the
fragment header (next header code 44). If the fragment header appears in
the third or subsequent header, it is not matched
• On the Dell Networking N2000 and N3000 Series switches, the IPv6 ACL
fragment keyword matches only on the first IPv6 extension header (next
header code 44). If the fragment header appears in the second or
subsequent header, it is not matched.
• The IPv6 ACL
routing keyword matches only on the first IPv6 extension
header (next header code 43). If the fragment header appears in the
second or subsequent header, it is not matched.
ACL Configuration Details
How Are ACLs Configured?
To configure ACLs, follow these steps:
1
Create a IP or MAC ACL by specifying a name.
2 Add new rules to the ACL.
3 Configure the match criteria for the rules.
4 Apply the ACL to one or more interfaces.
Editing Access Lists
When editing access lists, entries are added in the order specified by the rule
sequence number. It is recommended that rule sequence number indices be
separated by a fixed offset (e.g., 10). The ACL sequence number can range
from 1 to 2147483647.
If no sequence number is specified, new entries are added to the end of the
list. There is an implicit deny all statement at the end of the last access-group
that is not shown and is not editable. To insert a rule in the middle of an
NOTE: The actual number of ACLs and rules supported depends on the
resources consumed by other processes and configured features running on the
switch. If the switch does not allow a rule to be configured, consider disabling
features that consume user ACL space such as iSCSI, CFM, or IPv6 RA Guard.