White Papers

Version Description
9.8(0.0P2) Introduced on the S3048-ON.
9.7(0.0) Introduced on the S6000–ON.
9.2(1.0) Introduced on the Z9500.
9.0.2.0 Introduced on the S6000.
8.3.19.0 Introduced on the S4820T.
8.3.11.1 Introduced on the Z9000.
8.3.7.0 Introduced on the S4810.
8.1.1.0 Introduced on the E-Series.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series.
6.4.1.0 Introduced on the E-Series.
Usage
Information
The remark command is available in each ACL mode. You can configure up to 4294967291 remarks for a
given IP ACL and 65536 remarks for a given MAC ACL.
You can include a remark with or without a remark number. If you do not enter a remark number, the
remark inherits the sequence number of the last ACL rule. If there is no ACL rule when you enter a
remark, the remark takes sequence number 5. If you configure two remarks with the same sequence
number and different strings, the second one replaces the first string. You cannot configure two or more
remarks with the same string and different sequence numbers.
To remove a remark, use the no remark command with or without the sequence number. If there is a
matching string, the system deletes the remark.
Example
The following example shows the use of the remark command twice within CONFIGURATION-
STANDARD-ACCESS-LIST mode. The remark precedes the rule in the running configuration because it is
assumed that the remark is for the rule with the same sequence number, or the group of rules that follow
the remark.
DellEMC(config-std-nacl)# remark 10 Deny rest of the traffic
DellEMC(config-std-nacl)# remark 5 Permit traffic from XYZ Inc.
DellEMC(config-std-nacl)# show config
!
ip access-list standard test
remark 5 Permit traffic from XYZ Inc.
seq 5 permit 1.1.1.0/24
remark 10 Deny rest of the traffic
seq 10 deny any
DellEMC(config-std-nacl)#
The following example shows adding a remark without a sequence number:
DELLEMC(config-ext-nacl)#permit ip any any
DELLEMC(config-ext-nacl)#remark permit any ip
DELLEMC(config-ext-nacl)#show c
!
ip access-list extended testac
seq 5 permit ip any any
remark 5 permit any ip
The following example shows that the system displays an error message when the same remark string is
used with different remark numbers.
DELLEMC(config-ext-nacl)#seq 100 permit ip any any
DELLEMC(config-ext-nacl)#remark 10 permit any ip
DELLEMC(config-ext-nacl)#remark permit any ip
DELLEMC(config-ext-nacl)#% Error : Remark string already exists
Access Control Lists (ACL)
187