Cisco WAP131 Administration Manual page 141

ACL
ACL Rule
Cisco WAP131 and WAP351 Administration Guide
• Match Every Packet—If enabled, the rule, which either has a permit or deny
action, matches the frame or packet regardless of its contents. If you enable
this feature, you cannot configure any additional match criteria. This option is
selected by default for a new rule. You must disable the option to configure
other match fields.
• Protocol—Choose the protocol to match by keyword or protocol ID.
• Source IPv6—Requires a packet's source IPv6 address to match the IPv6
address defined in the appropriate fields.
- Source IPv6 Address—Enter the IPv6 address to apply this criteria.
- Source IPv6 Prefix Length—Enter the prefix length of the source IPv6
address.
• Source Port—Includes a source port in the match condition for the rule. The
source port is identified in the datagram header.
- Select From List—If selected, choose the port name from the list.
- Match to Port—Enter the IANA port number to match to the source port
identified in the datagram header. The port range is 0 to 65535 and
includes three different types of ports:
0 to 1023—Well Known Ports
1024 to 49151—Registered Ports
49152 to 65535—Dynamic and/or Private Ports
- Mask—Enter the port mask. The mask determines which bits are used
and which bits are ignored. Only the hexadecimal digit (0 – 0xFFFF) is
allowed. 0 means the bit matters and 1 means that we should ignore this
bit.
• Destination IPv6—Requires a packet's destination IPv6 address to match
the IPv6 address defined in the appropriate fields.
- Destination IPv6 Address—Enter an IPv6 address to apply this criteria.
- Destination IPv6 Prefix Length—Enter the prefix length of the
destination IPv6 address.
• Destination Port—Includes a destination port in the match condition for the
rule. The destination port is identified in the datagram header.
- Select From List—If selected, choose the port name from the list.
8
141