Users Guide

700 Access Control Lists
• On the Dell EMC Networking N4000 Series switches, the IPv6 ACL
fragment keyword matches only on the first two IPv6 extension headers for
the fragment header (next header code 44). If the fragment header appears
in the third or subsequent header, it is not matched
• On the Dell EMC Networking N2000 and N3000 Series switches, the IPv6
ACL fragment keyword matches only on the first IPv6 extension header
(next header code 44). If the fragment header appears in the second or
subsequent header, it is not matched.
• The IPv6 ACL routing keyword matches only on the first IPv6 extension
header (next header code 43). If the fragment header appears in the
second or subsequent header, it is not matched.
NOTE: The actual number of ACLs and rules supported depends on the
resources consumed by other processes and configured features running on the
switch. If the switch does not allow a rule to be configured, consider disabling
features that consume user ACL space such as iSCSI, CFM, or IPv6 RA Guard.