Users Guide

Permit ACL with L3 information only....................................................................................................................506
Deny ACL with L3 information only.......................................................................................................................506
Permit all packets from host.................................................................................................................................. 506
Permit only rst fragments and non-fragmented packets from host...............................................................506
Assign sequence number to lter................................................................................................................................506
User-provided sequence number...........................................................................................................................507
Auto-generated sequence number........................................................................................................................507
L2 and L3 ACLs..............................................................................................................................................................507
Assign and apply ACL lters.........................................................................................................................................508
Ingress ACL lters......................................................................................................................................................... 509
Egress ACL lters.......................................................................................................................................................... 509
Clear access-list counters............................................................................................................................................. 510
IP prex-lists....................................................................................................................................................................510
Route-maps..................................................................................................................................................................... 511
Match routes...................................................................................................................................................................512
Set conditions................................................................................................................................................................. 512
continue Clause.............................................................................................................................................................. 513
ACL ow-based monitoring...........................................................................................................................................513
Flow-based mirroring............................................................................................................................................... 513
Enable ow-based monitoring...................................................................................................................................... 514
ACL commands.............................................................................................................................................................. 515
clear ip access-list counters....................................................................................................................................515
clear ipv6 access-list counters............................................................................................................................... 515
clear mac access-list counters............................................................................................................................... 516
deny............................................................................................................................................................................516
deny (IPv6)................................................................................................................................................................517
deny (MAC)...............................................................................................................................................................517
deny icmp.................................................................................................................................................................. 518
deny icmp (IPv6)...................................................................................................................................................... 519
deny ip........................................................................................................................................................................519
deny ipv6.................................................................................................................................................................. 520
deny tcp.................................................................................................................................................................... 520
deny tcp (IPv6).........................................................................................................................................................521
deny udp................................................................................................................................................................... 522
deny udp (IPv6)....................................................................................................................................................... 523
description................................................................................................................................................................ 524
ip access-group........................................................................................................................................................524
ip access-list.............................................................................................................................................................524
ip as-path access-list.............................................................................................................................................. 525
ip community-list standard deny............................................................................................................................526
ip community–list standard permit........................................................................................................................526
ip extcommunity-list standard deny.......................................................................................................................527
ip extcommunity-list standard permit....................................................................................................................527
ip prex-list description........................................................................................................................................... 527
ip prex-list deny......................................................................................................................................................528
Contents
13