Defining An Ipv4-Based Acl - Cisco SF 300-08 Administration Manual

Access Control
IPv4-based ACLs
NOTE
STEP 1
STEP 2
STEP 3
STEP 4
STEP 1
STEP 2
Cisco Small Business 300 Series Managed Switch Administration Guide
The following fields can be matched:
• IP protocol (by name for well-known protocols, or directly by value)
• Source/destination ports for TCP/UDP traffic
• Flag values for TCP frames
• ICMP and IGMP type and code
• Source/destination IP addresses (including wildcards)
• DSCP/IP-precedence value
ACLs are also used as the building elements of flow definitions for per-flow QoS
handling (see QoS Advanced Mode).
The IPv4 Based ACL Page enables adding ACLs to the system. The rules are
defined in the IPv4 Based ACE Page.
IPv6 ACLs are defined in the IPv6 Based ACL Page.

Defining an IPv4-based ACL

To define an IPv4-based ACL:
Click Access Control > IPv4 Based ACL. The IPv4 Based ACL Page opens.
This page displays all currently defined IPv4-based ACLs.
Click Add. The Add IPv4 Based ACL Page opens.
Enter the name of the new ACL in the ACL Name field. The names are
case-sensitive.
Click Apply. The IPv4-based ACL is defined, and the switch is updated.
Adding Rules (ACEs) to an IPv4-Based ACL
To add rules (ACEs) to an IPv4-based ACL:
Click Access Control > IPv4 Based ACE. The IPv4 Based ACE Page opens.
Select an ACL, and click Go. All currently-defined IP ACEs for the selected ACL are
displayed.
17
237