Table of Contents
Advertisement
Access Control
Configuring IPv6-based ACEs
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x
•
Destination Port—Select one of the available values. (They are the same as
for the Source Port field described above).
You must specify the IPv6 protocol for the ACL before you can
NOTE
configure the source and/or destination port.
•
TCP Flags—Select one of more TCP flags with which to filter packets.
Filtered packets are either forwarded or dropped. Filtering packets by TCP
flags increases packet control, which increases network security.
Set
-
—Match if the flag is SET.
Unset
-
—Match if the flag is Not SET.
Don't care
-
—Ignore the TCP flag.
•
Type of Service—The service type of the IP packet.
Any
-
—Any service type.
DSCP to match
-
IP Precedence to match
-
service) that the network uses to help provide the appropriate QoS
commitments. This model uses the 3 most significant bits of the service
type byte in the IP header, as described in RFC 791 and RFC 1349.
ICMP—If the ACL is based on ICMP, select the ICMP message type that will
be used for filtering purposes. Either select the message type by name or
enter the message type number. If all message types are accepted, select
Any.
-
Any (IP)—All message types are accepted.
-
Select from list—Select message type by name from the drop-down list.
-
ICMP Type to match—Number of message type that will be used for
filtering purposes.
•
ICMP Code—The ICMP messages may have a code field that indicates how
to handle the message. Select one of the following options, to configure
whether to filter on this code:
-
Any—Accept all codes.
-
User Defined—Enter an ICMP code for filtering purposes.
—Differentiated Serves Code Point (DSCP) to match.
—IP precedence is a model of TOS (type of
17
236
Advertisement
Table of Contents
