S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
21-2
Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x
OL-9285-05
Chapter 21 Troubleshooting IP Access Lists
Overview
Address Information
For IPv4, specify the source and source-wildcard or the destination and destination-wildcard in one of
two ways:
•
Use the 32-bit quantity in four-part, dotted decimal format (10.1.1.2 0.0.0.0 is the same as host
10.1.1.2).
–
Each wildcard bit set to zero indicates that the corresponding bit position in the packet's IPv4
address must exactly match the bit value in the corresponding bit position in the source.
–
Each wildcard bit set to one indicates that both a zero bit and a one bit in the corresponding
position of the packet's IPv4 address will be considered a match to this access list entry. Place
ones in the binary bit positions you want to ignore and then convert to decimal. For example,
use 0.0.255.255 to require an exact match of only the first 16 bits of the source. Wildcard bits
set to one must be contiguous and at the end of the prefix. For example, a wildcard of 0.255.0.64
would not be valid.
•
Use the
any
option as an abbreviation for a source and source-wildcard or destination and
destination-wildcard (0.0.0.0 255.255.255.255)
For IPv6, specify the source or the destination IPv6 addresses in one of two ways:
•
Use the 128-bit quantity in colon-separated hexadecimal <prefix>/<length> format. For example,
use 2001:0DB8:800:200C::/64 to require an exact match of the first 64 bits of the source.
•
Use the
any
option as an abbreviation for a source or destination.
Port Information
To compare the source and destination ports, use the
eq
(equal) option, the
gt
(greater than) option, the
lt
(less than) option, or the
range
(range of ports) option.
Table 21-1
displays the port numbers
recognized by the Cisco SAN-OS software for associated TCP and UDP ports for IPv4.
Note
IPv6-ACL CLI commands do not support TCP or UDP port names.
Table 21-1
TCP and UDP Port Numbers for IPv4
Protocol
Port
Number
UDP
dns
53
tftp
69
ntp
123
radius accounting
1646 or 1813
radius authentication
1645 or 1812
snmp
161
snmp-trap
162
syslog
514
