Command Reference Guide

Access Control Lists (ACL) | 195
Defaults
Not configured
Command Modes
CONFIGURATION-STANDARD-ACCESS-LIST
Command
History
Usage
Information
The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
The
order option is relevant in the context of the Policy QoS feature only. The following
applies:
• The
seq sequence-number is applicable only in an ACL group.
• The
order option works across ACL groups that have been applied on an interface
via QoS policy framework.
any
Enter the keyword any to specify that all routes are subject to the filter.
host ip-address
Enter the keyword host followed by the IP address to specify a host IP
address or hostname.
count
(OPTIONAL) Enter the keyword count to count packets processed by
the filter.
byte
(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.
log
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL
matches in the log.
dscp
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP
values.
order
(OPTIONAL) Enter the keyword order to specify the QoS order for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest;
lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default (255).
monitor
(OPTIONAL) Enter the keyword monitor when the rule is describing
the traffic that you want to monitor and the ACL in which you are
creating the rule will be applied to the monitored interface. For details,
refer to the section “Flow-based Monitoring” in the Port Monitoring
chapter of the FTOS Configuration Guide.
fragments Enter the keyword fragments to use ACLs to control packet fragments.
Version 8.3.7.0 Introduced on S4810
Version 8.3.1.0 Add DSCP value for ACL matching.
Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Version 8.1.1.0 Introduced on E-Series ExaScale
Version 7.6.1.0 Added support for S-Series
Version 7.5.1.0 Added support for C-Series
Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option.
Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.