Deployment Guide

To view the rules of a particular ACL congured on a particular interface, use the show ip accounting access-list ACL-name
interface interface command in EXEC Privilege mode.
Example of Viewing the Rules of a Specic ACL on an Interface
Example of the seq Command to Order Filters
Dell#show ip accounting access-list ToOspf interface gig 1/6
Standard IP access list ToOspf
seq 5 deny any
seq 10 deny 10.2.0.0 /16
seq 15 deny 10.3.0.0 /16
seq 20 deny 10.4.0.0 /16
seq 25 deny 10.5.0.0 /16
seq 30 deny 10.6.0.0 /16
seq 35 deny 10.7.0.0 /16
seq 40 deny 10.8.0.0 /16
seq 45 deny 10.9.0.0 /16
seq 50 deny 10.10.0.0 /16
Dell#
The following example shows how the seq command orders the lters according to the sequence number assigned. In the example, lter
25 was congured before lter 15, but the show config command displays the lters in the correct order.
Dell(conf-std-nacl)#seq 25 deny ip host 10.5.0.0 any
Dell(conf-std-nacl)#seq 15 permit tcp 10.3.0.0 /16 any
Dell(conf-std-nacl)#show config
!
ip access-list standard dilling
seq 15 permit tcp 10.3.0.0/16 any
Dell(conf-std-nacl)#
To delete a lter, use the no seq sequence-number command in IP ACCESS LIST mode.
Conguring a Standard IP ACL Filter
If you are creating a standard ACL with only one or two lters, you can let the system ssign a sequence number based on the order in
which the lters are congured. The software assigns lters in multiples of ve.
1 Congure a standard IP ACL and assign it a unique name.
CONFIGURATION mode
ip access-list standard access-list-name
2 Congure a drop or forward IP ACL lter.
CONFIG-STD-NACL mode
{deny | permit} {source [mask] | any | host ip-address} [count [byte]] [order] [fragments]
The following example shows a standard IP ACL in which the system assigns the sequence numbers. The lters were assigned sequence
numbers based on the order in which they were congured (for example, the rst lter was given the lowest sequence number). The show
config command in IP ACCESS LIST mode displays the two lters with the sequence numbers 5 and 10.
Example of Viewing Filter Sequence for a Specied Standard ACL
Example of Viewing Standard ACL Filter Sequence for an Interface
Dell(config-route-map)#ip access standard kigali
Dell(config-std-nacl)#permit 10.1.0.0/16
Dell(config-std-nacl)#show config
!
ip access-list standard kigali
seq 5 permit 10.1.0.0/16
Dell(config-std-nacl)#
Access Control Lists (ACLs)
115