5-29
Chapter 5: Web Based Management Utility
Table 5-12. IP Extended ACL Configuration Page Parameters
Parameter Description
ACL Number
This specifies the unique ID for the access list. The valid range is between 1 to
32768. The factory default is blank.
Subnet Mask This specifies the Address Mask corresponding to the IP Address.
Action
This specifies the action to be taken for the access list. The factory default is
Permit.
• Permit: Forwards packets which meet the ACL criteria.
• Deny: Drops packets which meet the ACL criteria.
• Redirect: Forces packets which meet the ACL criteria to specified port.
Source and
Destination IP
Address
This parameter specifies the IP Address for which the access list must be
applied.
Ports List (Incoming)
This specifies the incoming physical ports if this ACL has to be port specific (for
example Gi0/1-10 or Gi0/1). The factory default is blank.
Ports List (Outgoing)
This specifies the outgoing physical ports if this ACL has to be port specific (for
example Gi0/1-10 or Gi0/1). The factory default is blank.
Protocol
This chooses the protocol type to be checked in the packet to apply this ACL.
The factory default is icmp.
Message Code
This specifies the Message Code to be checked for ICMP Packets. The valid
value is 255, which is also the factory default.
Message Type
This specifies the Message Type to be checked for ICMP Packets. The valid
value is 255, which is also the factory default.
Priority
The priority of the L3 filter is used to decide which filter rule is applicable when
the packet matches with more than one filter’s rules. The higher value of “Filter
Priority” implies a higher priority. The valid value is 1 to 32768, while the factory
default is 1.
DSCP
This specifies the Differentiated Services Code Point (DSCP) value assigned to
the classified traffic. The valid value is 0 to 63, and the factory default is blank.
TOS
Type of service (TOS) can be Max-reliability, Max Throughput, Min-delay, Normal
or a range of values from 0 to 7. The factory default is blank.
ACK Bit
This specifies the TCP ACK bit to be checked against the packet. It can be
Establish, Non-establish or Any.
RST Bit
This specifies the TCP RST bit to be checked against the packet. It can be Set,
Notset or Any.
Source Port (Min)/
(Max)
This specifies the min/max TCP/UDP source port from which the access list has
to be applied.
Destination Port
(Min)/(Max)
This parameter specifies the min/max TCP/UDP destination port from which the
access list has to be applied.
Other
This is only visible user to choose the Protocol as “other”. The allowed value
ranges are 1 to 255. The default value is 1.
To Next Page
Loading...
