Access Control
IPv6-Based ACL Creation
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
549
25
-
Single
by number
—Enter a single TCP/UDP source port to which
packets are matched. This field is active only if 800/6-TCP or 800/17-UDP
is selected in the IP Protocol drop-down menu.
-
Range
—Select a range of TCP/UDP source ports to which the packet is
matched.
•
Destination Port
—Select one of the available values. They are the same as
for the Source Port field described above.
NOTE
You must specify the IPv6 protocol for the ACL before you can
configure the source and/or destination port.
•
TCP Flags
—Select one or more TCP flags with which to filter packets.
Filtered packets are either forwarded or dropped. Filtering packets by TCP
flags increases packet control, which increases network security.
-
Set
—Match if the flag is SET.
-
Unset
—Match if the flag is Not SET.
-
Dont care
—Ignore the TCP flag.
•
Type of Service
—The service type of the IP packet.
-
Any
—Any service type
-
DSCP to Match
—Differentiated Serves Code Point (DSCP) to match
-
IP Precedence to match
—IP precedence is a model of TOS (type of
service) that the network uses to help provide the appropriate QoS
commitments. This model uses the 3 most significant bits of the service
type byte in the IP header, as described in RFC 791 and RFC 1349.
•
ICMP
—If the ACL is based on ICMP, select the ICMP message type that is
used for filtering purposes. Either select the message type by name or enter
the message type number. If all message types are accepted, select
Any
.
-
Any
—All message types are accepted.
-
Select from list
—Select message type by name from the drop-down list.
-
ICMP Type to Match
—Number of message type that is to be used for
filtering purposes.
•
ICMP Code
—The ICMP messages may have a code field that indicates how
to handle the message. Select one of the following options, to configure
whether to filter on this code:
-
Any
—Accept all codes.
