Table of Contents
Advertisement
Add ACE to IP Based ACL Page
The Add ACE to IP Based ACL page contains the following fields:
ACL Name—Contains a list of user-defined ACLs.
l
New ACE Priority—Defines the ACE priority. ACEs are checked on the first fit basis. The ACE priority defines the ACE order in the ACL list.
l
Protocol—Enables creating an ACE based on a specific protocol.
l
Source Port—Indicates the source port that is matched packets. Enabled only when TCP or UDP are selected in the Protocol list.
l
Destination Port—Indicates the destination port that is matched packets. Enabled only when TCP or UDP are selected in the Protocol list.
l
Source IP Address—Matches the source IP address to which packets are addressed to the ACE.
l
Wild Card Mask—Indicates the source IP Address wild card mask. Wild cards are used to mask all or part of a source IP Address. Wild card masks
l
specify which bits are used and which bits are ignored. A wild card mask of 255.255.255.255 indicates that no bit is important. A wildcard of 00.00.00.00
indicates that all bits are important. For example, if the source IP address 149.36.184.198 and the wildcard mask is 255.36.184.00, the first two bits of
the IP address are ignored, while the last two bits are used.
Dest. IP Address—Matches the destination IP address to which packets are addressed to the ACE.
l
Wild Card Mask—Indicates the destination IP Address wild card mask. Wild cards are used to mask all or part of a destination IP Address. Wild card
l
masks specify which bits are used and which bits are ignored. A wild card mask of 255.255.255.255 indicates that no bit is important. A wildcard of
00.00.00.00 indicates that all bits are important. For example, if the destination IP address 149.36.184.198 and the wildcard mask is 255.36.184.00, the
first two bits of the IP address are used, while the last two bits are ignored.
Match DSCP—Matches the packet DSCP value to the ACE. Either the DSCP value or the IP Precedence value is used to match packets to ACEs.
l
Match IP-Precedence—Matches the packet IP Precedence value to the ACE. Either the DSCP value or the IP Precedence value is used to match packets
l
to ACEs.
Action—Indicates the ACE forwarding action. The possible field values are:
l
Permit—Forwards packets which meet the ACE criteria.
¡
Deny—Drops packets which meet the ACE criteria.
¡
Deny and Disable Port—Drops packet that meet the ACE criteria, and disables the port to which the packet was addressed. Ports are
¡
reactivated from the Port Configuration; see
Adding IP-based ACLs:
1. Open the Add ACE to IP Based ACL page.
"Defining Port
Parameters".
Advertisement
Table of Contents
