| Security Measures
C
13
HAPTER
Access Control Lists
Both SYN and ACK valid, use control-code 18, control bit mask 18
■
SYN valid and ACK invalid, use control-code 2, control bit mask 18
■
Time Range – Name of a time range.
◆
W
I
EB
NTERFACE
To add rules to an IPv4 Extended ACL:
Click Security, ACL.
1.
Select Configure ACL from the Step list.
2.
Select Add Rule from the Action list.
3.
Select IP Extended from the Type list.
4.
Select the name of an ACL from the Name list.
5.
Specify the action (i.e., Permit or Deny).
6.
Select the address type (Any, Host, or IP).
7.
If you select "Host," enter a specific address. If you select "IP," enter a
8.
subnet address and the mask for an address range.
Set any other required criteria, such as service type, protocol type, or
9.
control code.
Click Apply.
10.
Figure 175: Configuring an Extended IPv4 ACL
– 324 –