Configuration Wizards
ACL Wizard
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 34
3
• Destination MAC Wildcard Mask—Enter the mask to define a range of MAC
addresses. Note that this mask is different than in other uses, such as subnet mask. Here,
setting a bit as 1 indicates don't care and 0 indicates to mask that value.
NOTE Given a mask of 0000 0000 0000 0000 0000 0000 1111 1111 (which means that
you match on the bits where there is 0 and don't match on the bits where there are 1's).
You need to translate the 1's to a decimal integer and you write 0 for each four zeros. In
this example since 1111 1111 = 255, the mask would be written: as 0.0.0.255.
• Time Range Name—If Time Range is selected, select the time range to be used. Time
ranges are defined in the System Time Configuration section. This field is only
displayed if a Time Range was previously created.
STEP 7 For a IPv4-based ACL, enter the fields:
• Protocol—Select one of the following options to create an ACL based on a specific
protocol:
- Any (IP)—Accept all IP protocols packets
- TCP—Accept Transmission Control Protocols packets
- UDP—Accept User Datagram Protocols packets
- ICMP—Accept ICMP Protocols packets
- IGMP—Accept IGMP Protocols packets
• Source Port for TCP/UDP—Select a port from the drop-down list.
• Destination Port for TCP/UDP—Select a port from the drop-down list.
• Source IP Address—Select Any if all source address are acceptable or User defined to
enter a source address or range of source addresses.
• Source IP Value—Enter the IP address to which the source IP address is to be matched.
• Source IP Wildcard Mask—Enter the mask to define a range of IP addresses. Note that
this mask is different than in other uses, such as subnet mask. Here, setting a bit as 1
indicates don't care and 0 indicates to mask that value.
• Destination IP Address—Select Any if all source address are acceptable or User
defined to enter a source address or range of source addresses.
• Destination IP Value—Enter the IP address to which the source IP address is to be
matched.
• Destination IP Wildcard Mask—Enter the mask to define a range of IP addresses.
Note that this mask is different than in other uses, such as subnet mask. Here, setting a
bit as 1 indicates don't care and 0 indicates to mask that value.
To Next Page
Loading...
Need help?
General
