7.6.1.0 - Force10 Networks

To create a filter for TCP packets with a specified sequence number, use these commands in the following
sequence, starting in the CONFIGURATION mode:
Step Command Syntax Command Mode Purpose
1 ip access-list extended
access-list-name
2
seq sequence-number {deny
| permit} tcp {source mask |
any | host ip-address}}
[count [byte] | log ] [order]
[monitor]
CONFIGURATION Create an extended IP ACL and assign it a
unique name.
To create a filter for UDP packets with a specified sequence number, use these commands in the following
sequence, starting in the CONFIGURATION mode:
Step Command Syntax Command Mode Purpose
1 ip access-list extended
access-list-name
2
seq sequence-number
{deny | permit}
{ip-protocol-number udp}
{source mask | any | host
ip-address} {destination
mask | any | host
ip-address} [operator port
[port]] [count [byte] | log ]
[order] [monitor]
IP ACCESS LIST Configure an extended IP ACL filter for TCP
packets.
• log and monitor options are supported on
E-Series only.
CONFIGURATION Create a extended IP ACL and assign it a
unique name.
IP ACCESS LIST Configure an extended IP ACL filter for UDP
packets.
• log and monitor options are supported on
E-Series only.
When you create the filters with a specific sequence number, you can create the filters in any order and the
filters are placed in the correct order.
Note: When assigning sequence numbers to filters, keep in mind that you might need to insert a
new filter. To prevent reconfiguring multiple filters, assign sequence numbers in multiples of five or
another number.
252 IP Access Control Lists, Prefix Lists, and Route-maps