Overview
14-10
14.1.6 mark
Extended ACL Config Commands
Use this command to mark specific packets.
Syntax
mark {dot1p <0-7> | tos <0-255>}} {ip} {source/source-mask | host source | any}
{destination/destination-mask | host destination | any} [log] [rule-precedence
access-list-entry precedence]
mark {dot1p <0-7> | tos <0-255>}} {icmp} {source/source-mask | host source | any}
{destination/ destination-mask | host destination | any} [icmp-type | [icmp-type
icmp-code]] [log] [rule-precedence access-list-entry precedence]
mark {dot1p <0-7> | tos <0-255>}} {tcp|udp} {source/source-mask | host source |
any} [operator source-port] {destination/destination-mask | host destination |
any} [operator destination-port] [log] [rule-precedence access-list-entry
precedence]
Parameters
mark {dot1p <0-7> | tos
<0-255>}} {ip} {source/
source-mask | host source
| any} {destination/
destination-mask | host
destination | any} [log]
[rule-precedence access-
list-entry precedence]
Use with the mark command to specify IP packets as marked.
• mark {dot1p <0-7> | tos <0-255>} – The keyword specifies mark action on
an ACL. The action type
mark is functional only over a Port ACL.
• dot1p <0-7> – Used only with action type
mark to specify 8021p
priority values.
• tos <0-255> – Used only with action type
mark to specify Type Of
Service (tos) values.
•{ip} – Specifies IP (to match any protocol).
• {source/source-mask | host source | any} – The keyword source is the
source IP address of the network or host in dotted decimal. Source-mask
is the network mask. For example, 10.1.1.10/24 indicates the first 24 bits
of the source IP are used for matching.
• any is an abbreviation for source IP of 0.0.0.0 and source-mask bits
equal to 0.
• host is an abbreviation for the exact source (A.B.C.D) and source-
mask bits equal to 32.
• {destination/destination-mask | host destination | any} – The destination
host IP address or destination network address.
• [log] – Generates log messages when the packet coming from the
interface matches the ACL entry. Log messages are generated only for
router ACLs.
• [rule-precedence access-list-entry precedence] – Integer value between
1-5000. This value sets the rule precedence in the ACL.
To Next Page
Loading...
Need help?
General
