Cisco PIX 500 Series Configuration Manual page 578

Configuring IPSec
Figure 27-2
symbol in the figure follows.
Cisco Security Appliance Command Line Configuration Guide
27-16
shows the cascading ACLs created from the conceptual ACEs above. The meaning of each
Crypto map within a crypto map set.
(Gap in a straight line) Exit from a crypto map when a packet
matches an ACE.
Packet that fits the description of one ACE. Each size ball
represents a different packet matching the respective ACE in the
figure. The differences in size merely represent differences in the
source and destination of each packet.
Redirection to the next crypto map in the crypto map set.
Response when a packet either matches an ACE or fails to match
all of the permit ACEs in a crypto map set.
Chapter 27 Configuring IPSec and ISAKMP
OL-12172-03