Cisco 12000 User Manual page 303

Chapter 11 Layer 3 QoS
Dynamic—Defines the selected access list to be dynamic. Dynamic access lists grant access per user to
a specific source or destination host through a user authentication process. You can allow user access
through a firewall dynamically, without compromising security restrictions.
Dynamic List
Name—Defines a name for the dynamic list (only available if Dynamic button is selected).
Time Out—Specifies the absolute length of time (in minutes) that a temporary access list entry can
remain in a dynamic access list. The default (0) is an infinite length of time and allows an entry to remain
permanently (only available if Dynamic button is selected).
Source and Destination
The Source and Destination areas contain the following fields:
Host Type—Indicates the hosts for which the access action are available. Possible values for this field
include the following:
•
•
•
•
Host Name—Name of the host (or source of the packet) for which the access action is applicable.
IP Address—IP address of the host (or source of the packet) for which the access action is applicable.
Wild Card—If the access action is applicable for more than one host, then this field should be used as a
mask. For example, the wild card 255.255.255.255 effectively represents any.
Port Criteria—Criteria to be applied on the specified port (interface) number. Possible values are as
follows:
•
•
•
•
•
•
Port
The Port sub-area in the Source and Destination areas contains the following fields:
Number—Port (interface) number from/to where the packet is sent or destined.
Range—Defines which port (interface) numbers will be allowed through this filter.
OL-4455-01
Any—All hosts
A.B.C.D—Specified IP address with wild card bits
Host Hostname—Only the specified hostname
Host A.B.C.D—Only the specified IP address
None—Port number is insignificant
Equal To—Equal to the port number
Not Equal To—Not equal to the port number
Greater Than—Greater than the port number
Less Than—Less than the port number
Range—Port number range
Cisco 12000/10700 v3.1.1 Router Manager User Guide
Access List Configuration
11-17