Cisco ROUTER-SDM-CD User Manual page 425

Chapter 17 IP Security
Used By
Type
Description
Action
Source
Destination
Service
OL-4015-12
Which crypto maps this rule is used in.
IPSec rules must specify both source and destination and must be able to specify
the type of traffic the packet contains. Therefore, IPSec rules are extended rules.
A textual description of the rule, if available.
Either Permit or Deny. Permit means that packets matching the criteria in this
rules are protected by encryption. Deny means that matching packets are sent
unencrypted. For more information see
Keywords.
An IP address or keyword that specifies the source of the traffic. Any specifies
that the source can be any IP address. An IP address in this column may appear
alone, or it may be followed by a
specifies the portions of the IP address that the source IP address must match. For
more information, see
An IP address or keyword that specifies the destination of the traffic. Any
specifies that the destination can be any IP address. An IP address in this column
may appear alone, or it may be followed by a
wildcard mask specifies the portions of the IP address that the destination IP
address must match.
The type of traffic that the packet must contain.
Cisco Router and Security Device Manager 2.5 User's Guide
Meanings of the Permit and Deny
wildcard mask. If present, the
IP Addresses and Subnet
wildcard mask
Masks.
wildcard mask. If present, the
IPSec Rules
17-21