xvi PowerConnect B-Series FCX Configuration Guide53-1002266-01Preserving user input for ACL TCP/UDP port numbers. . . . . . . . . .566Managing ACL comment text . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .567Adding a comment to an entry in a numbered ACL. . . . . . . . .567Adding a comment to an entry in a named ACL. . . . . . . . . . . .568Deleting a comment from an ACL entry . . . . . . . . . . . . . . . . . .568Viewing comments in an ACL . . . . . . . . . . . . . . . . . . . . . . . . . .568Applying an ACL to a virtual interface in a protocol-or subnet-based VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .569Enabling ACL logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .570Enabling strict control of ACL filtering of fragmented packets. . . .572Enabling ACL support for switched traffic in the router image . . .573Enabling ACL filtering based on VLAN membership or VE portmembership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .573Configuration notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 574Applying an IPv4 ACL to specific VLAN members ona port (Layer 2 devices only) . . . . . . . . . . . . . . . . . . . . . . . . . . . 574Applying an IPv4 ACL to a subset of ports on a virtualinterface (Layer 3 devices only) . . . . . . . . . . . . . . . . . . . . . . . .575Using ACLs to filter ARP packets . . . . . . . . . . . . . . . . . . . . . . . . . . . 576Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . . 576Configuring ACLs for ARP filtering . . . . . . . . . . . . . . . . . . . . . . . 576Displaying ACL filters for ARP . . . . . . . . . . . . . . . . . . . . . . . . . .577Clearing the filter count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .578Filtering on IP precedence and ToS values . . . . . . . . . . . . . . . . . . .578TCP flags - edge port security . . . . . . . . . . . . . . . . . . . . . . . . . .578QoS options for IP ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .579Configuration notes for PowerConnect B-Series FCX devices.579Using an IP ACL to mark DSCP values (DSCP marking). . . . . .580DSCP matching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .581ACL-based rate limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .582ACL statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .582Using ACLs to control multicast features. . . . . . . . . . . . . . . . . . . . .582Enabling and viewing hardware usage statistics for an ACL . . . . .582Displaying ACL information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583Troubleshooting ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583Policy-based routing (PBR) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .584Chapter 17 Configuring Quality of ServiceClassification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .591Processing of classified traffic . . . . . . . . . . . . . . . . . . . . . . . . .591