White Papers

Supported Modes Full–Switch
Command
History
Version Description
9.14.0.0 Made the remark number as an optional value.
9.9(0.0) Introduced on the FN IOM.
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Usage
Information
The remark command is available in each ACL mode. You can configure up to 4294967290 remarks in a
given ACL.
The following example shows the use of the remark command twice within CONFIGURATION-
STANDARD-ACCESS-LIST mode. The same sequence number was used for the remark and for an
associated ACL rule. The remark precedes the rule in the running-config because it is assumed that
the remark is for the rule with the same sequence number, or the group of rules that follow the remark.
You can include a remark with or without a remark number. If you do not enter a remark number, the
remark inherits the sequence number of the last ACL rule. If there is no ACL rule when you enter a
remark, the remark takes sequence number 5. If you configure two remarks with the same sequence
number and different strings, the second one replaces the first string. You cannot configure two or more
remarks with the same string and different sequence numbers.
To remove a remark, use the no remark command with or without the sequence number. If there is a
matching string, the system deletes the remark.
Example
DellEMC(config-std-nacl)# remark 10 Deny rest of the traffic
DellEMC(config-std-nacl)# remark 5 Permit traffic from XYZ Inc.
DellEMC(config-std-nacl)# show config
!
ip access-list standard test
remark 5 Permit traffic from XYZ Inc.
seq 5 permit 1.1.1.0/24
remark 10 Deny rest of the traffic
seq 10 deny any
DellEMC(config-std-nacl)#
The following example shows adding a remark without a sequence number:
DELLEMC(config-ext-nacl)#permit ip any any
DELLEMC(config-ext-nacl)#remark permit any ip
DELLEMC(config-ext-nacl)#show c
!
ip access-list extended testac
seq 5 permit ip any any
remark 5 permit any ip
The following example shows that the system displays an error message when the same remark string is
used with different remark numbers.
DELLEMC(config-ext-nacl)#seq 100 permit ip any any
DELLEMC(config-ext-nacl)#remark 10 permit any ip
DELLEMC(config-ext-nacl)#remark permit any ip
DELLEMC(config-ext-nacl)#% Error : Remark string already exists
Related
Commands
resequence access-list — Re-assigns sequence numbers to entries of an existing access-list.
resequence access-list
Re-assign sequence numbers to entries of an existing access-list.
Syntax
resequence access-list {ipv4 | mac} {access-list-name StartingSeqNum Step-
to-Increment}
142 Access Control Lists (ACL)