Users Guide

Access Control Lists (ACLs)
This chapter describes access control lists (ACLs), prex lists, and route-maps.
At their simplest, ACLs, prex lists, and route-maps permit or deny trac based on MAC and/or IP addresses. This chapter describes
implementing IP ACLs, IP prex lists and route-maps. For MAC ACLS, refer to Layer 2.
An ACL is essentially a lter containing some criteria to match (examine IP, transmission control protocol [TCP], or user datagram protocol
[UDP] packets) and an action to take (permit or deny). ACLs are processed in sequence so that if a packet does not match the criterion in
the rst lter, the second lter (if congured) is applied. When a packet matches a lter, the switch drops or forwards the packet based on
the lter’s specied action. If the packet does not match any of the lters in the ACL, the packet is dropped (implicit deny).
The number of ACLs supported on a system depends on your content addressable memory (CAM) size. For more information, refer to the
Content Addressable Memory (CAM) chapter.
Topics:
• IP Access Control Lists (ACLs)
• Implementing ACL on the Dell Networking OS
• ACLs and VLANs
• ACL Optimization
• Determine the Order in which ACLs are Used to Classify Trac
• IP Fragment Handling
• IP Fragments ACL Examples
• Layer 4 ACL Rules Examples
• Congure a Standard IP ACL
• Conguring a Standard IP ACL Filter
• Congure an Extended IP ACL
• Conguring Filters with a Sequence Number
• Conguring Filters Without a Sequence Number
• Established Flag
• Congure Layer 2 and Layer 3 ACLs
• Assign an IP ACL to an Interface
• Applying an IP ACL
• Counting ACL Hits
• Congure Ingress ACLs
• Congure Egress ACLs
• Applying Egress Layer 3 ACLs (Control-Plane)
• IP Prex Lists
• Conguration Task List for Prex Lists
• Creating a Prex List
• Creating a Prex List Without a Sequence Number
• Viewing Prex Lists
• Applying a Prex List for Route Redistribution
8
112 Access Control Lists (ACLs)