Cisco 2100 Series Configuration Manual page 245

Chapter 5 Configuring Security Solutions
From the Destination drop-down box, choose one of these options to specify the destination of the
c.
packets to which this ACL applies:
•
•
d. From the Protocol drop-down box, choose the protocol ID of the IP packets to be used for this ACL.
These are the protocol options:
•
•
•
•
•
•
•
•
•
•
•
Note
If you chose TCP or UDP in the previous step, two additional parameters appear: Source Port and
e.
Destination Port. These parameters enable you to choose a specific source port and destination port
or port ranges. The port options are used by applications that send and receive data to and from the
networking stack. Some ports are designated for certain applications such as telnet, ssh, http, and so
on.
From the DSCP drop-down box, choose one of these options to specify the differentiated services
f.
code point (DSCP) value of this ACL. DSCP is an IP header field that can be used to define the
quality of service across the Internet.
•
•
From the Direction drop-down box, choose one of these options to specify the direction of the traffic
g.
to which this ACL applies:
•
•
•
OL-17037-01
Any—Any destination (This is the default value.)
IP Address—A specific destination. If you choose this option, enter the IP address and netmask
of the destination in the edit boxes.
Any—Any protocol (This is the default value.)
TCP—Transmission Control Protocol
UDP—User Datagram Protocol
ICMP—Internet Control Message Protocol
ESP—IP Encapsulating Security Payload
AH—Authentication Header
GRE—Generic Routing Encapsulation
IP in IP—Internet Protocol (IP) in IP. Permits or denies IP-in-IP packets.
Eth Over IP—Ethernet-over-Internet Protocol
OSPF—Open Shortest Path First
Other—Any other Internet Assigned Numbers Authority (IANA) protocol
If you choose Other, enter the number of the desired protocol in the Protocol edit box.
Note
You can find the list of available protocols and their corresponding numbers here:
http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml
The controller can permit or deny only IP packets in an ACL. Other types of packets (such
as ARP packets) cannot be specified.
Any—Any DSCP (This is the default value.)
Specific—A specific DSCP from 0 to 63, which you enter in the DSCP edit box
Any—Any direction (This is the default value.)
Inbound—From the client
Outbound—To the client
Configuring and Applying Access Control Lists
Cisco Wireless LAN Controller Configuration Guide
5-57