Cisco 350XG series, Руководство администратора

Страница: 563 / 625

Access Control
IPv4-based ACL Creation
Cisco 350XG & 550XG Series 10G Stackable Managed Switches 543
25
STEP 3
Click Add .
STEP 4
Enter the parameters.
• ACL Name —Displays the name of the ACL.
• Priority —Enter the priority. ACEs with higher priority are processed first.
• Action —Select the action assigned to the packet matching the ACE. The
options are as follows:
- Permit —Forward packets that meet the ACE criteria.
-
Deny
—Drop packets that meet the ACE criteria.
- Shutdown —Drop packet that meets the ACE criteria and disable the port
to which the packet was addressed. Ports are reactivated from the Error
Recovery Settings page.
• Logging —Select to enable logging ACL flows that match the ACL rule.
• Time Range —Select to enable limiting the use of the ACL to a specific time
range.
• Time Range Name —If Time Range is selected, select the time range to be
used. Time ranges are defined in the System Time Configuration section.
• Protocol —Select to create an ACE based on a specific protocol or protocol
ID. Select Any (IPv4) to accept all IP protocols. Otherwise select one of the
following protocols from the drop-down list Selected from list :
-
ICMP
—Internet Control Message Protocol
- IGMP —Internet Group Management Protocol
-
IP in IP
—IP in IP encapsulation
- TCP —Transmission Control Protocol
-
EGP
—Exterior Gateway Protocol
- IGP —Interior Gateway Protocol
-
UDP
—User Datagram Protocol
- HMP —Host Mapping Protocol
-
RDP
—Reliable Datagram Protocol.
- IDPR —Inter-Domain Policy Routing Protocol