Cisco SF220-24 Administration Manual page 247

Access Control
Configuring IPv6-based ACEs
Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x
Destination IP Address Value
-
destination MAC address will be matched and its mask (if relevant).
Destination IP Prefix Length
-
• Source Port—Select one of the following:
- Any—Match to all source ports.
- Single—Enter a single TCP/UDP source port to which packets are
matched. This field is active only if TCP or UDP is selected from the
Select from list drop-down menu.
- Range—Select a range of TCP/UDP source ports to which the packet is
matched.
• Destination Port—Select one of the available values. (They are the same as
for the Source Port field.)
You must select an IPv6 protocol for the ACE before you configure the
NOTE
source and destination ports.
• TCP Flags—Select one of more TCP flags with which to filter packets.
Filtered packets are either forwarded or dropped. Filtering packets by TCP
flags increases packet control, which increases network security.
- Set —Match if the flag is SET.
Unset
- —Match if the flag is Not SET.
Don't care
- —Ignore the TCP flag.
• Type of Service—Select the service type of IP packets. The options are:
Any
- —Any service type.
DSCP to match
-
IP Precedence to match
-
service) that the network uses to help provide the appropriate QoS
commitments. This model uses the 3 most significant bits of the service
type byte in the IP header, as described in RFC 791 and RFC 1349.
ICMP—If the ACL is based on ICMP, select the ICMP message type that will
be used for filtering purposes. The options are:
- Any (IP)—All message types are accepted.
- Select from list—Select the message type by name from the drop-down
list.
—Enter the IP address to which the
—Enter the prefix length of the IP address.
—Differentiated Serves Code Point (DSCP) to match.
—IP precedence is a model of TOS (type of
17
245