Cisco 500 Series Administration Manual page 595

27
593
• Protocol ID to Match—Enter the ID of the protocol to be matched.
• Source IP Address—Select Any if all source address are acceptable or
User defined to enter a source address or range of source addresses.
• Source IP Address Value—Enter the IP address to which the source IP
address is to be matched and its mask (if relevant).
• Source IP Prefix Length—Enter the prefix length of the source IP address.
• Destination IP Address—Select Any if all destination address are
acceptable or User defined to enter a destination address or a range of
destination addresses.
• Destination IP Address Value—Enter the IP address to which the
destination MAC address is matched and its mask (if relevant).
• Destination IP Prefix Length—Enter the prefix length of the IP address.
• Source Port—Select one of the following:
- Any—Match to all source ports.
- Single from list—Select a single TCP/UDP source port to which packets
are matched. This field is active only if 800/6-TCP or 800/17-UDP is
selected in the IP Protocol drop-down menu.
- Single from number—Enter a single TCP/UDP source port to which
packets are matched. This field is active only if 800/6-TCP or 800/17-UDP
is selected in the IP Protocol drop-down menu.
- Range—Select a range of TCP/UDP source ports to which the packet is
matched.
• Destination Port—Select one of the available values. (They are the same as
for the Source Port field described above).
You must specify the IPv6 protocol for the ACL before you can
NOTE
configure the source and/or destination port.
• TCP Flags—Select one or more TCP flags with which to filter packets.
Filtered packets are either forwarded or dropped. Filtering packets by TCP
flags increases packet control, which increases network security.
- Set—Match if the flag is SET.
- Unset—Match if the flag is Not SET.
- Dont care—Ignore the TCP flag.
Cisco 500 Series Stackable Managed Switch Administration Guide
Access Control
IPv6-Based ACLs