Cisco 220 Series Smart Plus Administration Manual page 235

Access Control
Configuring IPv4-Based ACEs
STEP 5
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x
• TCP Flags—Select one or more TCP flags with which to filter packets.
Filtered packets are either forwarded or dropped. Filtering packets by TCP
flags increases packet control, which increases network security.
• Type of Service—The service type of the IP packet.
Any
- —Any service type.
DSCP to match
-
IP Precedence to match
-
service) that the network uses to help provide the appropriate QoS
commitments. This model uses the 3 most significant bits of the service
type byte in the IP header, as described in RFC 791 and RFC 1349.
• ICMP—If the IP protocol of the ACL is ICMP, select the ICMP message type
used for filtering purposes. Either select the message type by name or enter
the message type number:
- Any (IP) —All message types are accepted.
Select from list
-
ICMP Type to match
-
purposes.
• ICMP Code—The ICMP messages can have a code field that indicates how
to handle the message. Select one of the following options to configure
whether to filter on this code:
- Any —Accept all codes.
User Defined
-
• IGMP—If the ACL is based on IGMP, select the IGMP message type to be
used for filtering purposes. Either select the message type by name or enter
the message type number:
Any
- —All message types are accepted.
- Select from list
IGMP Type to match
-
filtering purposes.
Click Apply. The IPv4-based ACE is defined, and the Running Configuration is
updated.
—Differentiated Serves Code Point (DSCP) to match.
—IP precedence is a model of TOS (type of
—Select message type by name.
—Number of message type to be used for filtering
—Enter an ICMP code for filtering purposes.
—Select message type by name.
—Number of message type that will be used for
17
233