Reference Guide

708
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Contax
CLI\files\ACL.fm
DELL CONFIDENTIAL – PRELIMINARY 2013 - FOR PROOF ONLY
Command Mode
Interface Configuration (Ethernet, Port-Channel) mode.
User Guidelines
The deny rule actions: log-input and disable-port are not supported. Using
these actions will result in an error.
IPv4 ACLs and IPv6 ACLs can be bound together on an interface.
A MAC ACL cannot be bound on an interface together with an IPv4 ACL or
IPv6 ACL.
Two ACLs of the same type cannot be added to a port.
An ACL cannot be added to a port that is already bound to an ACL, without
first removing the current ACL and binding the two ACLs together
Example
console(config)# mac access-list extended server
console(config-mac-al)# permit 00:00:00:00:00:01 00:00:00:00:00:ff any
console(config-mac-al)# exit
console(config)# interface gi1/0/1
console(config-if)# service-acl output server
service-acl input block
Use the service-acl input block Interface Configuration mode commands to
discard packets that are classified to specific protocols. Use the no form of
those commands to disable discarding of the packets.
Syntax
service-acl input protocol1 [protocol2 … protocol6 ]
no service-acl input
Parameters
protocol—Specifies a protocol to filter. Available values are: blockcdp,
blockvtp, blockdtp, blockudld, blockpagp, blocksstp, and blockall.