C
HAPTER
13
| Security Measures
Access Control Lists
– 324 –
WEB INTERFACE
To show information on TCAM utilization:
1. Click Security, ACL.
2. Select Configure ACL from the Step list.
3. Select Show TCAM from the Action list.
Figure 172: Showing TCAM Utilization
SETTING THE ACL
NAME AND TYPE
Use the Security > ACL (Configure ACL - Add) page to create an ACL.
CLI REFERENCES
◆ "access-list ip" on page 724
◆ "show ip access-list" on page 730
◆ "access-list ipv6" on page 731
◆ "show ipv6 access-list" on page 735
PARAMETERS
These parameters are displayed in the web interface:
◆ ACL Name – Name of the ACL. (Maximum length: 32 characters)
◆ Type – The following filter modes are supported:
■
IP Standard: IPv4 ACL mode filters packets based on the source
IPv4 address.
■
IP Extended: IPv4 ACL mode filters packets based on the source
or destination IPv4 address, as well as the protocol type and
protocol port number. If the “TCP” protocol is specified, then you
can also filter packets based on the TCP control code.
■
IPv6 Standard: IPv6 ACL mode filters packets based on the source
IPv6 address.
■
IPv6 Extended: IPv6 ACL mode filters packets based on the
destination IP address, as well as DSCP, and next header type.
■
MAC – MAC ACL mode filters packets based on the source or
destination MAC address and the Ethernet frame type (RFC 1060).