Administrator Guide

ip access-list extended
Configure an extended IP access list (IP ACL) based on IP addresses or protocols.
C9000 Series
Syntax
ip access-list extended access-list-name [cpu-qos]
To delete an access list, use the no ip access-list extended access-list-name [cpu-qos]
command.
Parameters
access-list-name Enter a string up to 140 characters long as the access list name.
cpu-qos Enter the keyword cpu-qos to configure an extended IP ACL to be used only to filter
protocol traffic for control-plane policing (CoPP).
Defaults All access lists contain an implicit “deny any”; that is, if no match occurs, the packet is dropped.
Command Modes
CONFIGURATION
CONFIGURATION TERMINAL BATCH
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell
Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version Description
9.10(0.0) Introduced the Configuration Terminal Batch mode on C9010.
9.9(0.0) Introduced on the C9010.
9.2(1.0) Introduced on the Z9500.
8.3.19.0 Introduced on the S4820T.
8.3.11.1 Introduced on the Z9000.
8.3.10.0 Introduced on the S4810.
8.1.1.0 Introduced on the E-Series ExaScale.
7.8.1.0 Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up
to 16 characters long.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series.
6.2.1.1 Introduced on the E-Series.
Usage Information
The number of entries allowed per ACL is hardware-dependent. For detailed information on the number entries
allowed per ACL on the switch, refer to the Content Addressable Memory (CAM) chapter in the C9000 Series
Configuration Guide.
If you configure an extended IP ACL to be used only to filter protocol traffic for CoPP, you must enter the
keyword cpu-qos.
Use this command in Configuration Terminal Batch mode to configure the extended IP access list (IP ACL) in a
dual-homing setup.
Example
Dell(conf)#ip access-list extended TESTListEXTEND
Dell(config-ext-nacl)#
Related
Commands
ip access-list standard — configures a standard IP access list.
show config — displays the current configuration.
Access Control Lists (ACL) 237