Users Guide

Access Control Lists 707
• Log — perform the logging action on the matching packet as described
below.
• Mirror — forward a copy of the matching packet to the designated
interface. The original packet continues to be forwarded to its original
destination.
• Redirect — forward the matching packet to the designated interface. The
original destination of the packet is ignored.
• Rate limit — forward matching packets that do not exceed the rate limit.
Drop packets exceeding the rate limit. Refer to the DiffServ section for
more sophisticated ingress rate limiting.
The following actions are available for egress ACLs. Not all actions are
available for all types of ACLs. Refer to "ACL Limitations" on page 709 for
more details.
• CoS queue assignment — rewrite the matching packet CoS value. This
action does not affect processing of the packet within the switch.
• Log — perform the logging action on the matching packet as described
below.
• Mirror — forward a copy of the matching packet to the designated
interface. The original packet continues to be forwarded to its original
destination.
• Redirect — forward the matching packet to the designated interface. The
original destination of the packet is ignored.
• Rate limit — forward matching packets that do not exceed the rate limit.
Drop packets exceeding the rate limit. Refer to "Differentiated Services"
on page 1521 for more sophisticated ingress rate limiting.
What Is the ACL Redirect Function?
The redirect function allows traffic that matches a permit rule to be
redirected to a specific physical port or LAG instead of processed on the
original port. A packet that is redirected does not go through the normal
forwarding process. It is sent to the redirect target port. The redirect function
and mirror function are mutually exclusive. In other words, a given ACL rule
cannot be configured with both mirror and redirect attributes.