The show ip | mac | ipv6 accounting commands have been enhanced to display whethermonitoring is enabled for traffic that matches with the rules of the specific ACL.Example Output of the show CommandDell# show ip accounting access-list!Extended Ingress IP access list kar on TenGigabitEthernet 1/1/1Total cam count 1seq 5 permit ip 192.168.20.0/24 173.168.20.0/24 monitorDell#show ipv6 accounting access-list!Ingress IPv6 access list kar on TenGigabitEthernet 1/1/1Total cam count 1seq 5 permit ipv6 22::/24 33::/24 monitorEnabling Flow-Based MonitoringFlow-based monitoring is supported on the platform.Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead of all traffic onthe interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2and Layer 3 ingress and egress traffic. You can specify traffic using standard or extended access-lists.1. Enable flow-based monitoring for a monitoring session.MONITOR SESSION modeflow-based enable2. Define access-list rules that include the keyword monitor. Dell Networking OS only considers portmonitoring traffic that matches rules with the keyword monitor.CONFIGURATION modeip access-listFor more information, see Access Control Lists (ACLs).3. Apply the ACL to the monitored port.INTERFACE modeip access-group access-listExample of the flow-based enable CommandTo view an access-list that you applied to an interface, use the show ip accounting access-listcommand from EXEC Privilege mode.Dell(conf)#monitor session 0Dell(conf-mon-sess-0)#flow-based enableDell(conf)#ip access-list ext testflowDell(config-ext-nacl)#seq 5 permit icmp any any count bytes monitorDell(config-ext-nacl)#seq 10 permit ip 102.1.1.0/24 any count bytes monitorDell(config-ext-nacl)#seq 15 deny udp any any count bytesDell(config-ext-nacl)#seq 20 deny tcp any any count bytesDell(config-ext-nacl)#exitDell(conf)#interface TenGigabitEthernet 1/1/1Dell(conf-if-te-1/1/1)#ip access-group testflow inDell(conf-if-te-1/1/1)#show config!interface TenGigabitEthernet 1/1/1Access Control Lists (ACLs) 125
