Defining IP-based ACLs 85
■ OSPF — Matches the packet to the Open Shortest Path First (OSPF)
protocol.
■ PIM — Matches the packet to Protocol Independent Multicast
(PIM).
■ L2IP — Matches the packet to Layer 2 Internet Protocol (L2IP).
■ Protocol ID — Adds user-defined protocols by which packets are
matched to the ACE. Each protocol has a specific protocol number
which is unique. The possible field range is 0-255.
■ Source Port— Enables creating an ACL based on a specific protocol.
■ Destination Port — Indicates the destination port that is matched
packets. Enabled only when TCP or UDP are selected in the Protocol
list.
■ Any — Enables creating an ACL based on any protocol.
■ Source Wild Card Mask — Source IP address wildcard mask.Wild card
masks specify which bits are used and which bits are ignored. A wild
card mask of 255.255.255.255 indicates that no bit is important.
A wildcard of 0.0.0.0 indicates that all the bits are important.
For example, if the source IP address 149.36.184.198 and the
wildcard mask is 255.36.184.00, the first eight bits of the IP
address are ignored, while the last eight bits are used.
■ Source IP Address — Matches the source IP address from which
packets originate to the ACL.
■ Destination IP Address — Matches the destination IP address to
which packets are addressed to the ACL.
■ Destination Wild Card Mask — Indicates the destination IP Address
wild card mask. Wild cards are used to mask all or part of a
destination IP Address. Wild card masks specify which bits are used
and which bits are ignored. A wild card mask of 255.255.255.255
indicates that no bit is important. A wildcard of 00.00.00.00
indicates that all bits are important.
For example, if the destination IP address 149.36.184.198 and the
wildcard mask is 255.36.184.00, the first two bits of the IP address
are used, while the last two bits are ignored.
■ Match DSCP — Matches the packet DSCP value to the ACL. Either
the DSCP value or the IP Precedence value is used to match packets
to ACLs.
To Next Page
Loading...
