Service Manual

Guidelines for Conguring ACL VLAN Groups.................................................................................................................103
Conguring ACL VLAN Groups and Conguring FP Blocks for VLAN Parameters..........................................................103
Conguring ACL VLAN Groups.................................................................................................................................103
Conguring FP Blocks for VLAN Parameters............................................................................................................104
Viewing CAM Usage.......................................................................................................................................................105
Allocating FP Blocks for VLAN Processes.......................................................................................................................106
8 Access Control Lists (ACLs).........................................................................................107
IP Access Control Lists (ACLs)........................................................................................................................................107
CAM Usage.............................................................................................................................................................. 108
Implementing ACLs on Dell Networking OS.............................................................................................................. 108
Important Points to Remember....................................................................................................................................... 110
Conguration Task List for Route Maps.....................................................................................................................110
Conguring Match Routes.........................................................................................................................................112
Conguring Set Conditions........................................................................................................................................113
Congure a Route Map for Route Redistribution....................................................................................................... 114
Congure a Route Map for Route Tagging.................................................................................................................115
Continue Clause........................................................................................................................................................ 115
IP Fragment Handling...................................................................................................................................................... 115
IP Fragments ACL Examples......................................................................................................................................116
Layer 4 ACL Rules Examples......................................................................................................................................116
Congure a Standard IP ACL........................................................................................................................................... 117
Conguring a Standard IP ACL Filter......................................................................................................................... 118
Congure an Extended IP ACL........................................................................................................................................ 119
Conguring Filters with a Sequence Number.............................................................................................................119
Conguring Filters Without a Sequence Number...................................................................................................... 120
Congure Layer 2 and Layer 3 ACLs................................................................................................................................121
Assign an IP ACL to an Interface......................................................................................................................................121
Applying an IP ACL..........................................................................................................................................................122
Counting ACL Hits.................................................................................................................................................... 122
Congure Ingress ACLs...................................................................................................................................................122
Congure Egress ACLs................................................................................................................................................... 123
Applying Egress Layer 3 ACLs (Control-Plane)..........................................................................................................124
IP Prex Lists..................................................................................................................................................................125
Implementation Information...................................................................................................................................... 125
Conguration Task List for Prex Lists......................................................................................................................125
ACL Resequencing..........................................................................................................................................................129
Resequencing an ACL or Prex List..........................................................................................................................129
Route Maps.................................................................................................................................................................... 130
Implementation Information....................................................................................................................................... 131
Logging of ACL Processes...............................................................................................................................................131
Guidelines for Conguring ACL Logging....................................................................................................................132
Conguring ACL Logging.......................................................................................................................................... 132
Flow-Based Monitoring Support for ACLs.......................................................................................................................133
Behavior of Flow-Based Monitoring..........................................................................................................................133
Enabling Flow-Based Monitoring...............................................................................................................................134
6