Table of Contents
Advertisement
Configuration Wizards
ACL Wizard
STEP 7
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
•
Destination MAC Wildcard Mask—Enter the mask to define a range of MAC
addresses. Note that this mask is different than in other uses, such as subnet mask. Here,
setting a bit as 1 indicates don't care and 0 indicates to mask that value.
Given a mask of 0000 0000 0000 0000 0000 0000 1111 1111 (which means that
NOTE
you match on the bits where there is 0 and don't match on the bits where there are 1's).
You need to translate the 1's to a decimal integer and you write 0 for each four zeros. In
this example since 1111 1111 = 255, the mask would be written: as 0.0.0.255.
•
Time Range Name—If Time Range is selected, select the time range to be used. Time
ranges are defined in the
displayed if a Time Range was previously created.
For a IPv4-based ACL, enter the fields:
•
Protocol—Select one of the following options to create an ACL based on a specific
protocol:
-
Any (IP)—Accept all IP protocols packets
-
TCP—Accept Transmission Control Protocols packets
-
UDP—Accept User Datagram Protocols packets
-
ICMP—Accept ICMP Protocols packets
-
IGMP—Accept IGMP Protocols packets
•
Source Port for TCP/UDP—Select a port from the drop-down list.
•
Destination Port for TCP/UDP—Select a port from the drop-down list.
•
Source IP Address—Select Any if all source address are acceptable or User defined to
enter a source address or range of source addresses.
•
Source IP Value—Enter the IP address to which the source IP address is to be matched.
•
Source IP Wildcard Mask—Enter the mask to define a range of IP addresses. Note that
this mask is different than in other uses, such as subnet mask. Here, setting a bit as 1
indicates don't care and 0 indicates to mask that value.
•
Destination IP Address—Select Any if all source address are acceptable or User
defined to enter a source address or range of source addresses.
•
Destination IP Value—Enter the IP address to which the source IP address is to be
matched.
•
Destination IP Wildcard Mask—Enter the mask to define a range of IP addresses.
Note that this mask is different than in other uses, such as subnet mask. Here, setting a
bit as 1 indicates don't care and 0 indicates to mask that value.
System Time Configuration
section. This field is only
3
34
Hide quick links:
Advertisement
Table of Contents
