Users Guide

Example
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 1/1), len 54, sending
TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK PUSH
IP: s=10.1.2.206 (Ma 1/1), d=10.1.2.62, len 40, rcvd
TCP src=0, dst=0, seq=0, ack=0, win=0
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 1/1), len 226, sending
TCP src=23, dst=40869, seq=2112994896, ack=606901739, win=8192 ACK PUSH
IP: s=10.1.2.216 (Ma 1/1), d=10.1.2.255, len 78, rcvd
UDP src=0, dst=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 1/1), len 1500, sending fragment
IP Fragment, Ident = 4741, fragment offset = 0
ICMP type=0, code=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 1/1), len 1500, sending fragment
IP Fragment, Ident = 4741, fragment offset = 1480
IP: s=40.40.40.40 (local), d=224.0.0.5 (Gi 4/11), len 64, sending broad/
multicast
proto=89
IP: s=40.40.40.40 (local), d=224.0.0.6 (Gi 4/11), len 28, sending broad/
multicast
proto=2
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0
Usage Information
To stop packets from flooding the user terminal when debugging is turned on, use the count option.
The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port operators not equal
to (neq), greater than (gt), less than (lt), or range are not supported in access-group option (refer to the
following example). ARP packets (arp) and Ether-type (ether-type) are also not supported in the access-
group option. The entire rule is skipped to compose the filter.
The access-group option pertains to:
• IP protocol number: from 0 to 255
• Internet control message protocol (icmp) but not the ICMP message type (from 0 to 255)
• Any internet protocol (ip)
• Transmission Control Protocol (tcp) but not on the rst, syn, or urg bits
• User Datagram Protocol (udp)
In the case of ambiguous access control list rules, the debug ip packet access-control command is
disabled. A message appears identifying the error (refer to the Example below).
Example (Error
Messages)
Dell# debug ip packet access-group test
%Error: port operator GT not supported in access-list debug
%Error: port operator LT not supported in access-list debug
%Error: port operator RANGE not supported in access-list debug
%Error: port operator NEQ not supported in access-list debug
Dell#00:10:45: %RPM0-P:CP
%IPMGR-3-DEBUG_IP_PACKET_ACL_AMBIGUOUS_EXP: Ambiguous rules not
supported in access-list debug, access-list debugging is turned off
Dell#
ip address
Assign a primary and secondary IP address to the interface.
Syntax
ip address ip-address mask [secondary]
To delete an IP address from an interface, use the no ip address [ip-address] command.
Parameters
ip-address Enter an IP address in dotted decimal format.
mask Enter the mask of the IP address in slash prefix format (for example, /24).
IPv4 Routing 639