Access Control
IPv4-based ACL Creation
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
544
25
-
IPV6
—IPv6 over IPv4 tunneling
-
IPV6:ROUT
—Matches packets belonging to the IPv6 over IPv4 route
through a gateway
-
IPV6:FRAG
—Matches packets belonging to the IPv6 over IPv4 Fragment
Header
-
IDRP
—Inter-Domain Routing Protocol
-
RSVP
—ReSerVation Protocol
-
AH
—Authentication Header
-
IPV6:ICMP
—Internet Control Message Protocol
-
EIGRP
—Enhanced Interior Gateway Routing Protocol
-
OSPF
—Open Shortest Path First
-
IPIP
—IP in IP
-
PIM
—Protocol Independent Multicast
-
L2TP
—Layer 2 Tunneling Protocol
-
ISIS
—IGP-specific protocol
-
Protocol ID to Match
—Instead of selecting the name, enter the protocol
ID.
•
Source IP Address
—Select
Any
if all source address are acceptable or
User defined
to enter a source address or range of source addresses.
•
Source IP Address Value
—Enter the IP address to which the source IP
address is to be matched.
•
Source IP Wildcard Mask
—Enter the mask to define a range of IP
addresses. Note that this mask is different than in other uses, such as subnet
mask. Here, setting a bit as 1 indicates don't care and 0 indicates to mask that
value.
NOTE
Given a mask of 0000 0000 0000 0000 0000 0000 1111 1111 (which
means that you match on the bits where there is 0 and don't match on the bits
where there are 1's). You need to translate the 1's to a decimal integer and you
write 0 for each four zeros. In this example since 1111 1111 = 255, the mask
would be written: as 0.0.0.255.
