White Papers

The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port operators
not equal to (neq), greater than (gt), less than (lt), or range are not supported in access-group
option (refer to the following example). ARP packets (arp) and Ether-type (ether-type) are also not
supported in the access-group option. The entire rule is skipped to compose the filter.
The access-group option pertains to:
● IP protocol number: from 0 to 255
● Internet control message protocol (icmp) but not the ICMP message type (from 0 to 255)
● Any internet protocol (ip)
● Transmission Control Protocol (tcp) but not on the rst, syn, or urg bits
●
User Datagram Protocol (udp)
In the case of ambiguous access control list rules, the debug ip packet access-control
command is disabled. A message appears identifying the error (refer to the Example below).
Example (Error
Messages)
DellEMC# debug ip packet access-group test
%Error: port operator GT not supported in access-list debug
%Error: port operator LT not supported in access-list debug
%Error: port operator RANGE not supported in access-list debug
%Error: port operator NEQ not supported in access-list debug
DellEMC#00:10:45: %RPM0-P:CP
%IPMGR-3-DEBUG_IP_PACKET_ACL_AMBIGUOUS_EXP: Ambiguous rules not
supported in access-list debug, access-list debugging is turned off
DellEMC#
icmp6-redirect enable
Enable ICMP and ICMP6 redirects.
Syntax
icmp6-redirect enable
Command Modes EXEC Privilege
Command
History
This guide is platform-specific. For command information about other platforms, see the relevant Dell
EMC Networking OS Command Line Reference Guide.
Version Description
Legacy command Legacy command
Usage
Information
Use this command to notify hosts on the same network that a better route is available for a specific
destination.
The icmp6-redirect enable command is applicable for both IP and IPv6 routes.
ip address
Assign a primary and secondary IP address to the interface.
Syntax
ip address ip-address mask [secondary]
To delete an IP address from an interface, use the no ip address [ip-address] command.
Parameters
ip-address Enter an IP address in dotted decimal format.
mask Enter the mask of the IP address in slash prefix format (for example, /24).
752 IPv4 Routing