Cisco 7604 Configuration Manual page 11

Identifying Traffic with Access Lists
13
C H A P T E R
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
About Trustpoints
12-3
About Revocation Checking
Certificate Configuration
Preparing for Certificates
Generating Key Pairs
Removing Key Pairs
12-5
Establishing AAA Authentication
Verifying Configurations for Specified Settings
Exporting and Importing Keypairs and Certificates
Exporting a Keypair and Certificate
Importing a Keypair and Certificate
Linking Certificates to a Trustpoint
Configuration Example: Cut-Through-Proxy Authentication
Access List Overview
13-1
Access List Types
13-2
Access Control Entry Order
Access List Implicit Deny
IP Addresses Used for Access Lists When You Use NAT
Access List Commitment
Maximum Number of ACEs
Adding an Extended Access List
Extended Access List Overview
Allowing Broadcast and Multicast Traffic through the Transparent Firewall
Adding an Extended ACE
Adding an EtherType Access List
Supported EtherTypes
Apply Access Lists in Both Directions
Implicit Deny at the End of an Access List Does Not Affect IP or ARP Traffic
Using Extended and EtherType Access Lists on the Same Interface
Allowing MPLS
Adding an EtherType ACE
Adding a Standard Access List
Simplifying Access Lists with Object Grouping
How Object Grouping Works
Adding Object Groups
Adding a Protocol Object Group
Adding a Network Object Group
12-3
12-3
12-4
12-4
12-5
12-6
12-7
12-7
12-9
13-1
13-2
13-3
13-5
13-6
13-6
13-6
13-7
13-9
13-9
13-9
13-10
13-10
13-11
13-11
13-11
13-12
13-12
13-13
12-7
12-9
13-3
13-7
13-10
Contents
13-9
xi