Reference Guide

– gt — Greater than
– lt — Lesser than
– neq — Not equal to
– range — Range of ports, including the specied port numbers.
• host ipv6-address — (Optional) Enter the keyword and the IPv6 address to use a host address only.
Default Not congured
Command Mode IPV6-ACL
Usage Information OS10 cannot count both packets and bytes; when you enter the count byte options, only bytes increment. The
no version of this command removes the lter.
Example
OS10(conf-ipv6-acl)# permit udp any any capture session 1 count
Supported Releases 10.2.0E or later
remark
Species an ACL entry description.
Syntax
remark [remark-number] [description]
Parameters
• remark-number — (Optional) Enter a remark number, from 1 to 16777214 for IPv4, IPv6, and MAC.
• description — (Optional) Enter a description. A maximum of 80 characters.
Default Not congured
Command Mode IPV4-ACL
Usage Information Use dierent sequence numbers for the remark and the ACL rule. Congure up to 16777214 remarks for a given
IPv4, IPv6, or MAC.
Example
OS10(conf-ipv4-acl)# remark 10 Deny rest of the traffic
OS10(conf-ipv4-acl)# remark 5 Permit traffic from XYZ Inc.
Supported Releases 10.2.0E or later
seq deny
Assigns a sequence number to deny IP addresses while creating the lter.
Syntax
seq sequence-number deny [protocol-number | icmp | ip | tcp | udp] [A.B.C.D |
A.B.C.D/x | any | host ip-address] [A.B.C.D | A.B.C.D/x | any | host ip-
address] [capture | count [byte] | dscp value | fragment]
Parameters
• sequence-number — Enter the sequence number to identify the ACL for editing and sequencing number,
from 1 to 16777214.
• protocol-number — (Optional) Enter the protocol number, from 0 to 255.
• icmp — (Optional) Enter the ICMP address to deny.
• ip — (Optional) Enter the IP address to deny.
• tcp — (Optional) Enter the TCP address to deny.
Access Control Lists 525