◦ Single Address — Enter a single IPv4 address to apply this criteria.
◦ Address/ Mask— Enter the source IPv4 address mask. The mask for DiffServ is a network-style bit mask
in IP dotted decimal format indicating which part(s) of the destination IP address to use for matching against
packet content.
A DiffServ mask of 255.255.255.255 indicates that all bits are important, and mask of 0.0.0.0 indicates that
no bits are important. The opposite is true with an ACL wild card mask. For example, to match the criteria
to a single host address, use a mask of 255.255.255.255. To match the criteria to a 24-bit subnet (for example,
192.168.10.0/24), use a mask of 255.255.255.0.
• Destination Address — Requires a packet's destination IPv4 address to match the IPv4 address defined in the
appropriate fields.
◦ Any — Any IPv4 address to be used as the destination address.
◦ Single Address — Enter the IPv4 address to apply this criteria.
◦ Address/Mask — Enter the destination IP address mask.
Step 6
Click More, and configure the following parameters:
• Protocol — Uses a Layer 3 or Layer 4 protocol match condition based on the value of the IP Protocol field in IPv4
packets or the Next Header field in IPv6 packets. Choose the protocol to match by keyword or enter a protocol ID:
◦ All Traffic — Allows all traffic from any protocol.
◦ Select From List — Matches the selected protocol: IP, ICMP, IGMP, TCP, UDP.
◦ Custom — Matches a protocol that is not listed by name. Enter the protocol ID. The protocol ID is a standard
value assigned by IANA. The range is a number from 0 to 255.
If Protocol is All Traffic, Source Address and Destination Address are not optional.Note
• Source Port — Includes a source port in the match condition for the rule. The source port is identified in the
datagram header.
◦ Any — Any port is allowed as the source port.
◦ Select From List — Matches a keyword associated with the source port: ftp, ftpdata, http, smtp, snmp, telnet,
tftp, www. Each of these keywords translates into its equivalent port number.
◦ Custom — Matches the source port number in the datagram header to an IANA port number that you specify.
The port range is from 0 to 65535 and includes three different types of ports:
◦ 0 to 1023 — Well-Known ports
◦ 1024 to 49151 — Registered ports
◦ 49152 to 65535 — Dynamic and/or private ports
• Destination Port — Includes a destination port in the match condition for the rule. The destination port is identified
in the datagram header.
◦ Any — Any port is allowed as the destination port.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
74
Access Control
Configuring IPv4 Traffic Classes
To Next Page
Loading...
