Acl > Mac Based Acl - Cisco SRW2016 User Manual

Chapter 5
Source Port Defines the TCP/UDP source port to which
the ACE is matched. This field is active only if 800/6-TCP or
800/17-UDP are selected in the Select from List drop-down
menu. The possible field range is 0–65,535.
Destination Port Defines the TCP/UDP destination
port. This field is active only if 800/6-TCP or 800/17-UDP
are selected in the Select from List drop-down menu. The
possible field range is 0–65,535.
Source IP Address Matches the source port IP address to
which packets are addressed to the ACE.
Wildcard Mask
• Defines the source IP address
wildcard mask. Wildcard masks specify which bits
are used and which bits are ignored. A wild card
mask of 255.255.255.255 indicates that no bit is
important. A wildcard of 0.0.0.0 indicates that all
the bits are important. For example, if the source IP
address 149.36.184.198 and the wildcard mask is
255.36.184.00, the first eight bits of the IP address are
ignored, while the last eight bits are used.
Dest. IP Address
Matches the destination port IP address
to which packets are addressed to the ACE.
Wildcard Mask Defines the destination IP address
•
wildcard mask.
Match DSCP Matches the packet DSCP value to the ACE.
Either the DSCP value or the IP Precedence value is used to
match packets to ACLs. The possible field range is 0–63.
Match IP Precedence Matches the packet IP Precedence
value to the ACE. Either the DSCP value or the IP Precedence
value is used to match packets to ACLs. The possible field
range is 0–7.
The Add to List button adds the configured IP Based ACLs
to the IP Based ACL Table at the bottom of the screen.
WebView Switches
Advanced Configuration
ACL > MAC Based ACL
The MAC Based ACL screen allows a MAC based ACL to be
defined. ACEs can be added only if the ACL is not bound
to an interface.
ACL > Mac Based ACL
ACL Name Displays the user-defined MAC based ACLs.
New ACL Name Specifies a new user-defined MAC based
ACL name, the name cannot include spaces.
Delete ACL
Deletes the selected ACL.
Action
Indicates the ACL forwarding action. Possible field
values are:
Permit Forwards packets which meet the ACL
•
criteria.
• Deny Drops packets which meet the ACL criteria.
• Shutdown Drops packet that meet the ACL criteria,
and disables the port to which the packet was
addressed.
Source MAC Address Matches the source MAC address
to which packets are addressed to the ACE.
• Wildcard Mask Defines the source IP address
wildcard mask. Wildcard masks specify which bits
are used and which bits are ignored. A wild card
mask of 255.255.255.255 indicates that no bit is
important. A wildcard of 0.0.0.0 indicates that all
the bits are important. For example, if the source IP
address 149.36.184.198 and the wildcard mask is
255.36.184.00, the first eight bits of the IP address are
ignored, while the last eight bits are used.
Dest. MAC Address Matches the destination MAC
address to which packets are addressed to the ACE.
Wildcard Mask Defines the destination IP address
•
wildcard mask.
VLAN ID Matches the packet's VLAN ID to the ACE. The
possible field values are 2–4094.
35