Users Guide

Table Of Contents
Egress ACL filters..........................................................................................................................................................1239
VTY ACLs........................................................................................................................................................................ 1240
SNMP ACLs....................................................................................................................................................................1240
Clear access-list counters............................................................................................................................................1241
IP prefix-lists................................................................................................................................................................... 1241
Route-maps..................................................................................................................................................................... 1241
Match routes.................................................................................................................................................................. 1243
Set conditions.................................................................................................................................................................1243
Continue clause..............................................................................................................................................................1244
ACL flow-based monitoring........................................................................................................................................ 1244
Enable flow-based monitoring....................................................................................................................................1245
View ACL table utilization report...............................................................................................................................1246
Known behavior........................................................................................................................................................1247
ACL logging.....................................................................................................................................................................1248
Important notes....................................................................................................................................................... 1248
ACL commands.............................................................................................................................................................. 1248
clear ip access-list counters................................................................................................................................. 1248
clear ipv6 access-list counters.............................................................................................................................1249
clear mac access-list counters.............................................................................................................................1249
deny............................................................................................................................................................................ 1249
deny (IPv6)............................................................................................................................................................... 1250
deny (MAC)............................................................................................................................................................... 1251
deny icmp................................................................................................................................................................... 1251
deny icmp (IPv6)..................................................................................................................................................... 1252
deny ip........................................................................................................................................................................1252
deny ipv6................................................................................................................................................................... 1253
deny tcp..................................................................................................................................................................... 1253
deny tcp (IPv6)........................................................................................................................................................1254
deny udp.................................................................................................................................................................... 1255
deny udp (IPv6).......................................................................................................................................................1256
description.................................................................................................................................................................1256
ip access-group........................................................................................................................................................1257
ip access-list............................................................................................................................................................. 1257
ip as-path access-list..............................................................................................................................................1257
ip community-list standard deny..........................................................................................................................1258
ip communitylist standard permit......................................................................................................................1258
ip extcommunity-list standard deny....................................................................................................................1259
ip extcommunity-list standard permit.................................................................................................................1259
ip prefix-list description......................................................................................................................................... 1260
ip prefix-list deny.....................................................................................................................................................1260
ip prefix-list permit..................................................................................................................................................1260
ip prefix-list seq deny..............................................................................................................................................1261
ip prefix-list seq permit........................................................................................................................................... 1261
ipv6 access-group................................................................................................................................................... 1262
ipv6 access-list........................................................................................................................................................ 1262
ipv6 prefix-list deny................................................................................................................................................ 1262
ipv6 prefix-list description.....................................................................................................................................1263
ipv6 prefix-list permit............................................................................................................................................. 1263
ipv6 prefix-list seq deny.........................................................................................................................................1264
ipv6 prefix-list seq permit......................................................................................................................................1264
18
Contents