Note
Some advanced features also require global configuration.The following table describes advanced rule keywords for all supported devices.
Keyword |
Description |
IPv4 standard ACL |
IPv6 standard ACL |
IPv4 extended ACL |
IPv6 extended ACL |
Comments |
---|---|---|---|---|---|---|
copy-sflow |
sFlow monitoring |
P/D; I |
P/D; I |
P/D; I |
P/D; I |
|
count |
Counter statistics |
P/D/H; I/O |
P/D/H; I |
P/D/H; I/O |
P/D/H; I |
|
drop-precedence-force |
Re-marking drop-precedence |
NA |
NA |
P; I |
P; I |
Only under default, vxlan-visibility, and border-routing TCAM profiles. |
dscp |
DSCP filtering |
NA |
NA |
P/D/H; I/O |
P/D/H; I |
|
dscp-force |
DSCP re-marking |
NA |
NA |
P; I |
P; I |
For routed traffic only. |
log ( SLX 9150, SLX 9250) |
Logging |
P/D/H; I |
P/D/H; I |
P/D/H; I |
P/D/H; I |
|
log (SLX 9540, SLX 9640) |
Logging |
P/D; I |
P/D; I |
P/D; I |
P/D; I |
|
mirror ( SLX 9150, SLX 9250) |
Mirroring |
NA |
NA |
P/D/H; I |
P/D/H; I |
Not supported for:
|
mirror (SLX 9540, SLX 9640) |
Mirroring |
NA |
NA |
P/D; I |
P/D; I |
Not supported for:
|
device(config)# ip access-list extended ip_acl_01 device(conf-ipacl-ext)# seq 10 permit host 10.24.26.145 any count log mirror copy-sflow device(conf-ipacl-ext)# seq 20 deny host 10.34.36.245 any count log mirror copy-sflow