API Guide

fin (Optional) Set the bit as finishno more data from sender.
psh (Optional) Set the bit as push.
rst (Optional) Set the bit as reset.
syn (Optional) Set the bit as synchronize.
urg (Optional) Set the bit set as urgent.
capture (Optional) Capture packets the filter processes.
count (Optional) Count packets the filter processes.
byte (Optional) Count bytes the filter processes.
dscp value (Optional) Permit a packet based on the DSCP values, from 0 to 63.
fragment (Optional) Use ACLs to control packet fragments.
log (Optional) Enables ACL logging. Information about packets that match an ACL rule are logged.
Default Not configured
Command Mode IPV6-ACL
Usage
Information
OS10 cannot count both packets and bytes; when you enter the count byte options, only bytes
increment. The no version of this command removes the filter, or use the no seq sequence-number
command if you know the filters sequence number.
Example
OS10(config)# ipv6 access-list egress
OS10(conf-ipv6-acl)# seq 5 permit udp any any capture session 1 log
Supported
Releases
10.2.0E or later
show access-group
Displays IP, MAC, or IPv6 access-group information.
Syntax
show {ip | mac | ipv6} access-group name
Parameters
ip View IP access group information.
mac View MAC access group information.
ipv6 View IPv6 access group information.
access-group name Enter the name of the access group.
Default Not configured
Command Mode EXEC
Usage
Information
None
Example (IP)
OS10# show ip access-group aaa
Ingress IP access list aaa on ethernet1/1/1
Ingress IP access list aaa on ethernet1/1/2
Egress IP access list aaa on ethernet1/1/2
Example (MAC)
OS10# show mac access-group bbb
Ingress MAC access list aaa on ethernet1/1/1
Ingress MAC access list aaa on ethernet1/1/2
Egress MAC access list aaa on ethernet1/1/2
Example (IPv6)
OS10# show ipv6 access-group ccc
Ingress IPV6 access list aaa on ethernet1/1/1
Ingress IPV6 access list aaa on ethernet1/1/2
Egress IPV6 access list aaa on ethernet1/1/2
1168 Access Control Lists