Removing Ip Filters From An Existing Ipv4-Acl Or Ipv6-Acl - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Creating IPv4-ACLs or IPv6-ACLs with the IP-ACL Wizard
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Figure 42-5
Choose either permit or deny for the Action and set the IP Number in the Protocol field. The drop-down
Step 7
menu provides common filtered protocols.
Set the source IP address you want this filter to match against and the wildcard mask, or check the any
Step 8
check box to match this filter against any IP address.
This creates an IP filter that will check the source IP address of frames.
Note
Step 9 Set the transport layer source port range if the protocol chosen is TCP or UDP.
Step 10 Repeat
This creates an IP filter that will check the destination IP address of frames.
Set the ToS, ICMPType, and ICMPCode fields as appropriate.
Step 11
Check the TCPEstablished check box if you want to match TCP connections with
Step 12
ACK,FIN,PSH,RST,SYN or URG control bits set.
Check the LogEnabled check box if you want to log all frames that match this IP filter.
Step 13
Click Create to create this IP filter and add it to your IP-ACL.
Step 14

Removing IP Filters from an Existing IPv4-ACL or IPv6-ACL

To remove configured entries from an IPv4-ACL or an IPv6-ACL using Device Manager, follow these
steps:
Choose Security > IP ACLs.
Step 1
You see the IP-ACL dialog box
Cisco MDS 9000 Family Fabric Manager Configuration Guide
42-8
Create IP Filter Dialog Box
The wildcard mask denotes a subset of the IP address you want to match against. This allows a
range of addresses to match against this filter.
Step 8 and Step 9 for the destination IP address and port range.
(seeFigure
Chapter 42 Configuring IPv4 and IPv6 Access Control Lists
42-2).
OL-17256-03, Cisco MDS NX-OS Release 4.x