148 | IP Access Control Lists (ACL), Prefix Lists, and Route-mapsw w w . d e l l . c o m | s u p p o r t . d e l l . c o m To apply an IP ACL (standard or extended) to a physical or port channel interface, use these commands inthe following sequence in the INTERFACE mode:To view which IP ACL is applied to an interface, use the show config command (Figure 232) in theINTERFACE mode or the show running-config command in the EXEC mode.Figure 8-9. Command example: show config in the INTERFACE ModeUse only Standard ACLs in the access-class command to filter traffic on Telnet sessions.Counting ACL HitsYou can view the number of packets matching the ACL by using the count option when creating ACLentries. E-Series supports packet and byte counts simultaneously. C-Series and S-Series support only oneat any given time.To view the number of packets matching an ACL that is applied to an interface:Step Command Syntax Command Mode Purpose1 interface interface slot/port CONFIGURATION Enter the interface number.2 ip address ip-address INTERFACE Configure an IP address for the interface, placingit in Layer-3 mode.3 ip access-group access-list-name{in | out} [implicit-permit] [vlanvlan-range]INTERFACE Apply an IP ACL to traffic entering or exiting aninterface.• out: configure the ACL to filter outgoingtraffic. This keyword is supported only onE-Series.Note: The number of entries allowed perACL is hardware-dependent. Refer toyour line card documentation for detailedspecification on entries allowed per ACL.4 ip access-list [standard |extended] nameINTERFACE Apply rules to the new ACL.Step Task1 Create an ACL that uses rules with the count option. See Configure a standard IP ACL on page 1402 Apply the ACL as an inbound or outbound ACL on an interface. See Assign an IP ACL to an Interface onpage 147FTOS(conf-if)#show conf!interface GigabitEthernet 0/0ip address 10.2.1.100 255.255.255.0ip access-group nimule inno shutdownFTOS(conf-if)#
