Using Access Control Lists for Security 351
Use 6 or 7 only for SpectraLink VoIP phones. For other VoIP phones, use
4or5.
By default, the CoS level is -1, which indicates that class of service is not
specified.
5 To enable counting of packets filtered by an ACL, select Enable Hit
Count.
6 In the Source IP box, type the source IP address and source wildcard mask
in classless interdomain routing (CIDR) notation (for example,
10.10.10.10/16).
A wildcard mask is a 32-bit quantity used with the IP address to
determine which bits in the address to ignore when compared with
another IP address. Source and destination IP addresses and
corresponding wildcard masks determine whether to forward or filter
packets.
The ACL checks the bits in IP addresses that correspond to zeros in the
mask, but does not check the bits that correspond to ones. The zero bit
must start at the beginning of the wildcard mask and must be
contiguous.
For example, if you specify 10.2.3.4/24, the source wildcard mask is
0.0.0.255.
To specify any IP address, use 0.0.0.0/0.
7 In the Destination IP box, type the destination IP address and destination
wildcard mask in CIDR notation.
8 In the TOS box, type a TOS value from -1 to 15.
The following lists specific values and their meanings:
■ -1 (any) — All packets are subject to the ACE regardless of whether
TOS is set.
■ 0 (normal) — Packets with normal TOS defined are filtered.
Packet Priority
Desired
CoS Value
MAP CoS Queue
Assigned
Background 1 or 2 Class 3
Best effort 0 or 3 Class 2
Video 4 or 5 Class 1
Voice 6 or 7 Class high
To Next Page
Loading...
