Deployment Guide

You can activate ow-based monitoring for a monitoring session by entering the flow-based enable
command in the Monitor Session mode. When you enable this capability, trac with particular ows that are
traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both
the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specied trac
instead all trac on the interface. This feature is particularly useful when looking for malicious trac. It is available
for Layer 2 and Layer 3 ingress and egress trac. You may specify trac using standard or extended access-lists.
This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port.
The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
Related Commands
deny — congures a lter to drop packets.
permit — congures a lter to forward packets.
Extended MAC ACL Commands
When an access-list is created without any rule and then applied to an interface, ACL behavior reects implicit permit. The following
commands congure Extended MAC ACLs.
The Switch supports both Ingress and Egress MAC ACLs.
mac access-list standard
To congure a standard MAC ACL, name a new or existing MAC access control list (MAC ACL) and enter MAC ACCESS LIST mode.
Syntax
mac access-list standard mac-list-name
Parameters
mac-list-name Enter a text string as the name of the standard MAC access list (140 character
maximum).
Defaults Not congured.
Command Modes CONFIGURATION
Supported Modes Full–Switch
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
The Dell operating system supports one ingress and one egress MAC ACL per interface.
The number of entries allowed per ACL is hardware-dependent. For detailed specication about entries allowed per
ACL, refer to your switch documentation.
The switch supports both ingress and egress ACLs.
Example
Dell(conf)#mac-access-list access-list standard TestMAC
Dell(config-std-macl)#permit 00:00:00:00:00:00 00:00:00:00:ff:ff count
Dell(config-std-macl)#deny any count
188 Access Control Lists (ACL)