82 | Access Control Lists (ACLs)w w w . d e l l . c o m | s u p p o r t . d e l l . c o m You can apply the same ACL to different interfaces and that changes its functionality. For example, youcan take ACL “ABCD”, and apply it using the in keyword and it becomes an ingress access list. If youapply the same ACL using the out keyword, it becomes an egress access list.For more information about Layer-3 interfaces, refer to Interfaces.To apply an IP ACL (standard or extended) to a physical or port channel interface, follow these steps, inINTERFACE mode:To view which IP ACL is applied to an interface, use the show config command (Figure 5-12) inINTERFACE mode or the show running-config command in EXEC mode.Figure 5-12. Command example: show config command in the INTERFACE ModeUse only standard ACLs in the access-class command to filter traffic on Telnet sessions.Counting ACL HitsYou can view the number of packets matching the ACL by using the count option when creating ACLentries. In the MXL Switch, either count (packets) or count (bytes) can be configured. However, for anACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) atany given time.Step Command Syntax Command Mode Purpose1 interface interface slot/port CONFIGURATION Enter the interface number.2 ip address ip-address INTERFACE Configure an IP address for the interface, placingit in Layer-3 mode.3 ip access-group access-list-name {in| out} [implicit-permit] [vlanvlan-range]INTERFACE Apply an IP ACL to traffic entering or exiting aninterface.out: configure the ACL to filter outgoing traffic.• Note: The number of entries allowed perACL is hardware-dependent.4 ip access-list [standard | extended]nameINTERFACE Apply rules to the new ACL.FTOS(conf-if)#show conf!interface TenGigabitEthernet 0/0ip address 10.2.1.100 255.255.255.0ip access-group nimule inno shutdownFTOS(conf-if)#
