Cisco Wap581 - Page 96

• Custom — Enter the IANA port number to match to the source port identified in the datagram header. The
port range is 0 to 65535 and includes three different types of ports:
• 0 to 1023 — Well known ports
• 1024 to 49151 — Registered ports
• 49152 to 65535 — Dynamic and/or private port
• Destination IPv6 Address — Requires a packet's destination IP address to match the address defined in the appropriate
fields.
• Any — Enter any IP address.
• Single Address — Enter an IP address to apply this criteria.
• Address/ Mask — Enter the destination IP address wild card mask. The wild card mask determines which bits
are used and which bits are ignored. A wild card mask of 255.255.255.255 indicates that no bit is important.
A wild card of 0.0.0.0 indicates that all bits are important.
A wild card mask is basically the inverse of a subnet mask. For example, to match the criteria to a single host
address, use a wild card mask of 0.0.0.0. To match the criteria to a 24-bit subnet (for example, 192.168.10.0/24),
use a wild card mask of 0.0.0.255.
• Destination Port — Includes a destination port in the match condition for the rule. The destination port is identified
in the datagram header.
• Any — Any port that meets the rule criteria.
• Select From List — Choose the keyword associated with the destination port to match: ftp, ftpdata, http,
smtp, snmp, telnet, tftp, www. Each of these keywords translates into its equivalent port number.
• Custom — Enter the IANA port number to match to the destination port identified in the datagram header.
The port range is from 0 to 65535 and includes three different types of ports:
• 0 to 1023 — Well known ports
• 1024 to 49151 — Registered ports
• 49152 to 65535 — Dynamic and/or private port
• Flow Label — Specifies a 20-bit number that is unique to an IPv6 packet.
• Any — Any 20- bit number.
• DSCP — Matches the number based on a custom DSCP value.
• DSCP— Matches the packets based on their IP DSCP value.
• Any — Allows for any DSCP value.
• Select From List — Select a DSCP value from the drop down list.
• Custom — Enter a custom DSCP value, from 0 to 63.
Step 7 Click OK. The changes are saved to the Startup Configuration.
Cisco WAP581 Wireless-AC/N Dual Radio Access Point with 2.5GbE LAN Administration Guide
86
Access Control
Configure IPv6 ACLs