Reference Guide

884 | Security
www.dell.com | support.dell.com
To create a filter for UDP packets with a specified sequence number, use these commands in the following
sequence, starting in the CONFIGURATION mode:
When you create the filters with a specific sequence number, you can create the filters in any order and the
filters are placed in the correct order.
The following example illustrates how the
seq command orders the filters according to the sequence
number assigned. In the example, filter 15 was configured before filter 5, but the
show config command
displays the filters in the correct order.
FTOS(config-trace-acl)#seq 15 deny ip host 12.45.0.0 any log
FTOS(config-trace-acl)#seq 5 permit tcp 121.1.3.45 0.0.255.255 any
FTOS(config-trace-acl)#show conf
!
ip trace-list dilling
seq 5 permit tcp 121.1.0.0 0.0.255.255 any
2
seq sequence-number {deny |
permit} tcp {source mask | any |
host ip-address} [operator port
[
port]] {destination mask | any |
host ip-address} [operator port
[
port]] [established] [count [byte]
|
log]
TRACE LIST Configure a trace list filter for TCP packets.
• source: An IP address as the source IP
address for the filter to match.
• mask: a network mask
• any: to match any IP source address
• host ip-address: to match IP addresses in a
host.
• destination: An IP address as the source IP
address for the filter to match.
• count: count packets processed by the filter.
• byte: count bytes processed by the filter.
• log: is supported.
Step Command Syntax Command Mode Purpose
1 ip trace-list access-list-name CONFIGURATION Create a trace list and assign it a unique name.
2
seq sequence-number {deny |
permit} udp {source mask | any |
host ip-address} [operator port
[
port]] {destination mask | any |
host ip-address} [operator port
[
port]] [count [byte] | log]
TRACE LIST Configure a trace list filter for UDP packets.
• source: An IP address as the source IP address
for the filter to match.
• mask: a network mask
• any: to match any IP source address
• host ip-address: to match IP addresses in a
host.
• destination: An IP address as the source IP
address for the filter to match.
• count: count packets processed by the filter.
• byte: count bytes processed by the filter.
• log: is supported.
Note: When assigning sequence numbers to filters, keep in mind that you might need to insert a
new filter. To prevent reconfiguring multiple filters, assign sequence numbers in multiples of five or
another number.
Step Command Syntax Command Mode Purpose