FTOS Configuration Guide for the C-Series - Force10 Networks

To create a filter for UDP packets with a specified sequence number, use these commands in the following
sequence, starting in the CONFIGURATION mode:
Step Command Syntax Command Mode Purpose
1 ip trace-list access-list-name CONFIGURATION Create a trace list and assign it a
unique name.
2
seq sequence-number {deny | permit}
udp {source mask | any | host
ip-address} [operator port [port]]
{destination mask | any | host
ip-address} [operator port [port]]
[count [byte] | log]
When you create the filters with a specific sequence number, you can create the filters in any order and the
filters are placed in the correct order.
Figure 83 illustrates how the seq command orders the filters according to the sequence number assigned.
In the example, filter 15 was configured before filter 5, but the show config command displays the filters
in the correct order.
Figure 83 Trace list Using seq Command Example
TRACE LIST Configure a trace list filter for UDP
packets.
• source: An IP address as the source
IP address for the filter to match.
• mask: a network mask
• any: to match any IP source
address
• host ip-address: to match IP
addresses in a host.
• destination: An IP address as the
source IP address for the filter to
match.
• count: count packets processed by
the filter.
• byte: count bytes processed by the
filter.
• log: is supported.
Note: When assigning sequence numbers to filters, keep in mind that you might need to insert a
new filter. To prevent reconfiguring multiple filters, assign sequence numbers in multiples of five or
another number.
Force10(config-trace-acl)#seq 15 deny ip host 12.45.0.0 any log
Force10(config-trace-acl)#seq 5 permit tcp 121.1.3.45 0.0.255.255 any
Force10(config-trace-acl)#show conf
!
ip trace-list dilling
seq 5 permit tcp 121.1.0.0 0.0.255.255 any
seq 15 deny ip host 12.45.0.0 any log
Force10(config-trace-acl)#
If you are creating a Trace list with only one or two filters, you can let FTOS assign a sequence number
based on the order in which the filters are configured. FTOS assigns filters in multiples of 5.
170 Security