Configuration Wizards
ACL Wizard
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
34
3
•
Destination MAC Wildcard Mask
—Enter the mask to define a range of MAC
addresses. Note that this mask is different than in other uses, such as subnet mask. Here,
setting a bit as
1
indicates don't care and
0
indicates to mask that value.
NOTE
Given a mask of 0000 0000 0000 0000 0000 0000 1111 1111 (which means that
you match on the bits where there is 0 and don't match on the bits where there are 1's).
You need to translate the 1's to a decimal integer and you write 0 for each four zeros. In
this example since 1111 1111 = 255, the mask would be written: as 0.0.0.255.
•
Time Range Name
—If
Time Range
is selected, select the time range to be used. Time
ranges are defined in the
displayed if a Time Range was previously created.
STEP 7
For a IPv4-based ACL, enter the fields:
•
Protocol
—Select one of the following options to create an ACL based on a specific
protocol:
-
Any (IP)
—Accept all IP protocols packets
-
TCP
—Accept Transmission Control Protocols packets
-
UDP
—Accept User Datagram Protocols packets
-
ICMP
—Accept ICMP Protocols packets
-
IGMP
—Accept IGMP Protocols packets
•
Source Port for TCP/UDP
—Select a port from the drop-down list.
•
Destination Port for TCP/UDP
—Select a port from the drop-down list.
•
Source IP Address
—Select
Any
if all source address are acceptable or
User defined
to
enter a source address or range of source addresses.
•
Source IP Value
—Enter the IP address to which the source IP address is to be matched.
•
Source IP Wildcard Mask
—Enter the mask to define a range of IP addresses. Note that
this mask is different than in other uses, such as subnet mask. Here, setting a bit as 1
indicates don't care and 0 indicates to mask that value.
•
Destination IP Address
—Select
Any
if all source address are acceptable or
User
defined
to enter a source address or range of source addresses.
•
Destination IP Value
—Enter the IP address to which the source IP address is to be
matched.
•
Destination IP Wildcard Mask
—Enter the mask to define a range of IP addresses.
Note that this mask is different than in other uses, such as subnet mask. Here, setting a
bit as 1 indicates don't care and 0 indicates to mask that value.
