Configuring Device Security
Defining Access Control
Cisco Small Business SFE/SGE Managed Switches Administration Guide 110
4
• Source IP Address — Matches the source port IP address to which packets are
addressed to the ACE.
• Dest. IP Address — Matches the destination port IP address to which packets
are addressed to the ACE.
• Traffic Class — Indicates the traffic class to which the packet is matched.
Select either Match DSCP or Match IP Precedence.
-
Match DSCP
— Matches the packet to the DSCP tag value.
-
Match IP Precedence
— Matches the packet IP Precedence value to the
ACE. Either the DSCP value or the IP Precedence value is used to match
packets to ACLs. The possible field range is 0-7.
• Action — Indicates the action assigned to the packet matching the ACL.
Packets are forwarded or dropped. In addition, the port can be shut down, a
trap can be sent to the network administrator, or packet is assigned rate
limiting restrictions for forwarding. The options are as follows:
-
Permit
— Forwards packets which meet the ACL criteria.
-
Deny
— Drops packets which meet the ACL criteria.
-
Shutdown
— Drops packet that meets the ACL criteria, and disables the
port to which the packet was addressed. Ports are reactivated from the
Port Management
page.
STEP 3 Select an ACL from the ACL Name drop-down list.
STEP 4 Click the Add Rule button. The
Add IP Based Rule Page
opens:
To Next Page
Loading...
