Table of Contents
Advertisement
4.5.1.3 ACL Rule Configuration
Use these screens to configure the rules for the Access Control Lists created using the Access Control
List Configuration screen. What is shown on this screen varies depending on the current step in the rule
configuration process. An ACL must first be selected to configure rules for. The rule identification, and the
'Action' and 'Match Every' parameters must be specified next. If 'Match Every' is set to false a new screen
will then be presented from which the match criteria can be configured.
Selection Criteria
ACL ID - Use the pulldown menu to select the ACL for which to create or update a rule.
Rule - Select an existing rule from the pulldown menu, or select 'Create New Rule.'
ACL as well as an option to add a new Rule. New rules cannot be created if the
maximum number of rules has been reached. For each rule, a packet must match all
the specified criteria in order to be true against that rule and for the specified rule
action (Permit/Deny) to take place.
Configurable Data
Rule - Enter a whole number in the range of 1 to 10 that will be used to identify the rule.
An ACL may have up to 10 user-specified rules.
Action - Specify what action should be taken if a packet matches the rule's criteria.
The choices are permit or deny.
Match Every - Select true or false from the pulldown menu. True signifies that all
packets will match the selected ACL and Rule and will be either permitted or denied. In
this case, since all packets match the rule, the option of configuring other match criteria
will not be offered. To configure specific match criteria for the rule, remove the rule and
re-create it, or re-configure 'Match Every' to 'False' for the other match criteria to be
visible.
Protocol Keyword - Specify that a packet's IP protocol is a match condition for the
selected ACL rule. The possible values are ICMP, IGMP, IP, TCP, and UDP. Either the
'Protocol Keyword' field or the 'Protocol Number' field can be used to specify an IP
protocol value as a match criterion.
Protocol Number - Specify that a packet's IP protocol is a match condition for the
selected ACL rule and identify the protocol by number. The protocol number is a
standard value assigned by IANA and is interpreted as an integer from 1 to 255. Either
the 'Protocol Number' field or the 'Protocol Keyword' field can be used to specify an IP
protocol value as a match criterion.
Source IP Address - Enter an IP address using dotted-decimal notation to be
compared to a packet's source IP Address as a match criteria for the selected ACL
rule.
Source IP Mask - Specify the IP Mask in dotted-decimal notation to be used with the
Advertisement
Table of Contents
