Concept Guide

Topics:
• IP Access Control Lists (ACLs)
• Important Points to Remember
• IP Fragment Handling
• Congure a Standard IP ACL
• Congure an Extended IP ACL
• Congure Layer 2 and Layer 3 ACLs
• Assign an IP ACL to an Interface
• Applying an IP ACL
• Congure Ingress ACLs
• Congure Egress ACLs
• IP Prex Lists
• ACL Remarks
• ACL Resequencing
• Route Maps
• Logging of ACL Processes
• Flow-Based Monitoring
IP Access Control Lists (ACLs)
In Dell EMC Networking switch/routers, you can create two dierent types of IP ACLs: standard or extended.
A standard ACL lters packets based on the source IP packet. An extended ACL lters trac based on the following criteria:
• IP protocol number
• Source IP address
• Destination IP address
• Source TCP port number
• Destination TCP port number
• Source UDP port number
• Destination UDP port number
For more information about ACL options, refer to the Dell EMC Networking OS Command Reference Guide.
For extended ACL, TCP, and UDP lters, you can match criteria on specic or ranges of TCP or UDP ports. For extended ACL TCP lters,
you can also match criteria on established TCP sessions.
When creating an access list, the sequence of the lters is important. You have a choice of assigning sequence numbers to the lters as
you enter them, or the Dell EMC Networking Operating System (OS) assigns numbers in the order the lters are created. The sequence
numbers are listed in the display output of the show config and show ip accounting access-list commands.
Ingress and egress Hot Lock ACLs allow you to append or delete new rules into an existing ACL (already written into CAM) without
disrupting trac ow. Existing entries in the CAM are shued to accommodate the new entries. Hot lock ACLs are enabled by default and
support both standard and extended ACLs and on all platforms.
NOTE
: Hot lock ACLs are supported for Ingress ACLs only.
Access Control Lists (ACLs) 109