Users Guide

Table Of Contents
Ingress ACL filters.......................................................................................................................................................... 1112
Egress ACL filters........................................................................................................................................................... 1112
VTY ACLs..........................................................................................................................................................................1113
SNMP ACLs......................................................................................................................................................................1113
Clear access-list counters............................................................................................................................................ 1113
IP prefix-lists.................................................................................................................................................................... 1113
Route-maps......................................................................................................................................................................1114
Match routes................................................................................................................................................................... 1115
Set conditions..................................................................................................................................................................1116
Continue clause............................................................................................................................................................... 1116
ACL flow-based monitoring..........................................................................................................................................1116
Enable flow-based monitoring......................................................................................................................................1117
View ACL table utilization report................................................................................................................................ 1118
Known behavior........................................................................................................................................................ 1120
ACL logging..................................................................................................................................................................... 1120
Important notes........................................................................................................................................................ 1120
ACL commands................................................................................................................................................................1121
clear ip access-list counters...................................................................................................................................1121
clear ipv6 access-list counters.............................................................................................................................. 1121
clear mac access-list counters.............................................................................................................................. 1121
deny............................................................................................................................................................................. 1122
deny (IPv6)................................................................................................................................................................ 1122
deny (MAC)............................................................................................................................................................... 1123
deny icmp................................................................................................................................................................... 1124
deny icmp (IPv6)...................................................................................................................................................... 1124
deny ip.........................................................................................................................................................................1125
deny ipv6.................................................................................................................................................................... 1125
deny tcp......................................................................................................................................................................1126
deny tcp (IPv6).........................................................................................................................................................1127
deny udp..................................................................................................................................................................... 1127
deny udp (IPv6)........................................................................................................................................................1128
description................................................................................................................................................................. 1129
ip access-group........................................................................................................................................................ 1129
ip access-list..............................................................................................................................................................1130
ip as-path access-list.............................................................................................................................................. 1130
ip community-list standard deny.......................................................................................................................... 1130
ip communitylist standard permit....................................................................................................................... 1131
ip extcommunity-list standard deny..................................................................................................................... 1131
ip extcommunity-list standard permit................................................................................................................. 1132
ip prefix-list description.......................................................................................................................................... 1132
ip prefix-list deny......................................................................................................................................................1132
ip prefix-list permit...................................................................................................................................................1133
ip prefix-list seq deny.............................................................................................................................................. 1133
ip prefix-list seq permit........................................................................................................................................... 1134
ipv6 access-group....................................................................................................................................................1134
ipv6 access-list......................................................................................................................................................... 1135
ipv6 prefix-list deny................................................................................................................................................. 1135
ipv6 prefix-list description..................................................................................................................................... 1135
ipv6 prefix-list permit..............................................................................................................................................1136
ipv6 prefix-list seq deny......................................................................................................................................... 1136
Contents
19