Reference Guide

709
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Contax
CLI\files\ACL.fm
DELL CONFIDENTIAL – PRELIMINARY 2013 - FOR PROOF ONLY
Default Configuration
No protocol is defined
Command Mode
Interface Configuration ((Ethernet, Port-Channel) mode
User Guidelines
To define multiple protocols on the same interface, define them in the same
command.
To change configuration of the protocol filtering for an interface, first remove
the current assignment of protocol filtering assignment, and then assign the
new configuration of the protocol filtering.
If Proprietary Protocol Filtering rules are assigned on an interface, you cannot
assign ACL or Policy Map or Security suite rules to that interface and enable
802.1X Dynamic Policy Assignment to that interface.
If ACL or Policy Map or Security suite rules are assigned to an interface or
802.1X Dynamic Policy Assignment is enabled for an interface, you cannot
assign Proprietary Protocol Filtering rules to that interface.
The following table defines the DA and protocol types of the packets that are
subject for discarding per each command:
Example
Console (Config-if)# service-acl input blockcdp blockvtp
Command Destination Address Protocol Type
blockcdp 0100.0ccc.cccc 0x2000
blockvtp 0100.0ccc.cccc 0x2003
blockdtp 0100.0ccc.cccc 0x2004
blockudld 0100.0ccc.cccc 0x0111
blockpagp 0100.0ccc.cccc 0x0104
blocksstp 0100.0ccc.cccd -
blockall 0100.0ccc.ccc0 - 0100.0ccc.cccf -