Setup Guide

ipv4pbr number} ecfmacl number [nlbclusteraclnumber]fcoeacl number iscsioptacl number
ipv4udfmirracl number | ipv4mirracl number}
2 Create a monitor session.
CONFIGURATION mode
monitor session session-ID [type { rpm | erpm [set ip dscp dscp_value | set ip ttl
ttl_value]}] [drop]
Dell(conf)#monitor session 65535 type erpm
3 Create an IP access-list.
CONFIGURATION mode
ip access-list {standard | extended} access-list-name
Dell(conf)#ip access-list standard test
4 Congure a lter to permit the IP packets.
CONFIGURATION—STANDARD—ACCESS—LIST mode
CONFIGURATION—EXTENDED—ACCESS—LIST mode
permit {source mask | any | host ip-address} {destination mask | any | host ip-address}
[count [bytes]] [dscp value] [order] [fragments] [monitor [session-id]] [no-drop]
Dell(config-ext-nacl)#permit ip any any count monitor 65535
5 Associate the IP access list to an interface.
INTERFACE mode
ip mirror-access-group access-list-name {in | out} [implicit-permit] [vlan vlan-id]
[optimized]
Dell(conf-if-te-0/4)#ip mirror-access-group acl3 in
To view which IP mirror-access-group is applied to an interface, use the show config command in INTERFACE mode, or use the show
running-config
command in EXEC mode.
Sample Conguration
Dell#configure terminal
Dell(conf)#cam-acl l2acl 2 ipv4acl 4 ipv6acl 2 ipv4qos 0 l2qos 1 l2pt 0 ipmacacl 0 vman-qos 0
ipv4udfmirracl 4
Dell(conf)#end
Dell(conf)#monitor session 65535 type erpm
Dell(conf)#ip access-list extended test
Dell(config-ext-nacl)#permit ip any any count monitor 65535
Dell(config-ext-nacl)#end
Dell(conf)#interface TenGigabitEthernet 1/1/1
Dell(conf-if-te-1/1/1)#ip mirror-access-group test acl5
Dell(conf-if-te-1/1/1)#end
136
Access Control Lists (ACLs)