Cisco SF500-24 Administration Manual page 489

24
471
• Time Range—Select to enable limiting the use of the ACL to a specific time
range.
• Time Range Name—If Time Range is selected, select the time range to be
used. Time ranges are described in the
• Protocol—Select to create an ACE based on a specific protocol. Select Any
(IPv6) to accept all IP protocols. Otherwise select one of the following
protocols:
- TCP—Transmission Control Protocol. Enables two hosts to communicate
and exchange data streams. TCP guarantees packet delivery, and
guarantees that packets are transmitted and received in the order they
were sent.
- UDP—User Datagram Protocol. Transmits packets but does not
guarantee their delivery.
- ICMP—Matches packets to the Internet Control Message Protocol
(ICMP).
• Protocol ID to Match—Enter the ID of the protocol to be matched.
• Source IP Address—Select Any if all source address are acceptable or
User defined to enter a source address or range of source addresses.
• Source IP Address Value—Enter the IP address to which the source IP
address is to be matched and its mask (if relevant).
• Source IP Prefix Length—Enter the prefix length of the source IP address.
• Destination IP Address—Select Any if all destination address are
acceptable or User defined to enter a destination address or a range of
destination addresses.
• Destination IP Address Value—Enter the IP address to which the
destination MAC address is matched and its mask (if relevant).
• Destination IP Prefix Length—Enter the prefix length of the IP address.
• Source Port—Select one of the following:
- Any—Match to all source ports.
- Single—Enter a single TCP/UDP source port to which packets are
matched. This field is active only if 800/6-TCP or 800/17-UDP is selected
in the IP Protocol drop-down menu.
Cisco 500 Series Stackable Managed Switch Administration Guide Release 1.3
Access Control
IPv6-Based ACLs
Time Range section.