Cisco SF 300-08 Administration Manual page 249

Access Control
IPv4-based ACLs
STEP 3
STEP 4
Cisco Small Business 300 Series Managed Switch Administration Guide
Click Add. The Add IPv4 Based ACE Page opens.
Enter the parameters.
• ACL Name—Displays the name of the ACL.
• Priority—Enter the priority. ACEs with higher priority are processed first.
• Action—Select the action assigned to the packet matching the ACE. The
options are as follows:
- Permit—Forward packets that meet the ACE criteria.
- Deny—Drop packets that meet the ACE criteria.
- Shutdown—Drop packet that meets the ACE criteria and disable the
port to which the packet was addressed. Ports are reactivated from the
Port Management page.
• Protocol—Select to create an ACE based on a specific protocol or protocol
ID. Select Any (IPv4) to accept all IP protocols. Otherwise select one of the
following protocols from the drop-down list:
- ICMP—Internet Control Message Protocol
- IGMP—Internet Group Management Protocol
- IP in IP—IP in IP encapsulation
- TCP—Transmission Control Protocol
- EGP—Exterior Gateway Protocol
- IGP—Interior Gateway Protocol
- UDP—User Datagram Protocol
- HMP—Host Mapping Protocol
- RDP—Reliable Datagram Protocol.
- IDPR—Inter-Domain Policy Routing Protocol
- IPV6—IPv6 over IPv4 tunneling
- IPV6:ROUT—Matches packets belonging to the IPv6 over IPv4 route
through a gateway
- IPV6:FRAG—Matches packets belonging to the IPv6 over IPv4 Fragment
Header
17
238