Reference Guide

106 | Access Control Lists (ACL), Prefix Lists, and Route-maps
www.dell.com | support.dell.com
Configure filters with sequence number
To create a filter for packets with a specified sequence number, use these commands in the following
sequence, starting in the CONFIGURATION mode:
TCP packets: To create a filter for TCP packets with a specified sequence number, use these commands in
the following sequence, starting in the CONFIGURATION mode:
UDP packets: To create a filter for UDP packets with a specified sequence number, use these commands
in the following sequence, starting in the CONFIGURATION mode:
Step Command Syntax Command Mode Purpose
1
ip access-list extended
access-list-name
CONFIGURATION Enter the IP ACCESS LIST mode by creating
an extended IP ACL.
2 seq sequence-number {deny |
permit} {ip-protocol-number |
icmp | ip | tcp | udp
}
{
source mask | any | host
ip-address} {destination mask |
any | host ip-address} [operator
port [port]] [count [byte] | ]
[
order][fragments]
CONFIG-EXT-NACL Configure a drop or forward filter.
•
Step Command Syntax Command Mode Purpose
1
ip access-list extended
access-list-name
CONFIGURATION Create an extended IP ACL and assign it a
unique name.
2 seq sequence-number {deny |
permit} tcp {source mask | any
|
host ip-address}} [count
[
byte] ] [order] [fragments]
CONFIG-EXT-NACL Configure an extended IP ACL filter for TCP
packets.
•
log and monitor options are supported on
E-Series only.
Step Command Syntax Command Mode Purpose
1
ip access-list extended
access-list-name
CONFIGURATION Create a extended IP ACL and assign it a unique
name.
2 seq sequence-number {deny |
permit} {ip-protocol-number
udp} {source mask | any |
host ip-address} {destination
mask
| any | host ip-address}
[
operator port [port]] [count
[
byte] ] [order][fragments]
CONFIG-EXT-NACL Configure an extended IP ACL filter for UDP
packets.
•