◦
Address/Mask
—
Enter the source IP address wild card mask. The wild card mask determines which bits
are used and which bits are ignored. A wild card mask of 255.255.255.255 indicates that no bit is important.
A wild card of 0.0.0.0 indicates that all bits are important. This field is required when the
Source IP Address
is checked.
A wild card mask is basically the inverse of a subnet mask. For example, to match the criteria to a single host
address, use a wild card mask of 0.0.0.0. To match the criteria to a 24-bit subnet (for example, 192.168.10.0/24),
use a wild card mask of 0.0.0.255.
•
Source Port
—
Includes a source port in the match condition for the rule. The source port is identified in the
datagram header.
◦
Any
—
Allows for any source port.
◦
Select From List
—
Choose the keyword associated with the source port to match: ftp, ftpdata, http, smtp,
snmp, telnet, tftp, www. Each of these keywords translates into its equivalent port number.
◦
Custom
—
Enter the IANA port number to match to the source port identified in the datagram header. The
port range is 0 to 65535 and includes three different types of ports:
◦
0 to 1023
—
Well known ports
◦
1024 to 49151
—
Registered ports
◦
49152 to 65535
—
Dynamic and/or private port
•
Destination IPv6 Address
—
Requires a packet's destination IP address to match the address defined in the
appropriate fields.
◦
Any
—
Enter any IP address.
◦
Single Address
—
Enter an IP address to apply this criteria.
◦
Address/ Mask
—
Enter the destination IP address wild card mask. The wild card mask determines which
bits are used and which bits are ignored. A wild card mask of 255.255.255.255 indicates that no bit is important.
A wild card of 0.0.0.0 indicates that all bits are important. This field is required when the Source IP Address
is selected.
A wild card mask is basically the inverse of a subnet mask. For example, to match the criteria to a single host
address, use a wild card mask of 0.0.0.0. To match the criteria to a 24-bit subnet (for example, 192.168.10.0/24),
use a wild card mask of 0.0.0.255.
•
Destination Port
—
Includes a destination port in the match condition for the rule. The destination port is identified
in the datagram header.
◦
Any
—
Any port that meets the rule criteria.
◦
Select From List
—
Choose the keyword associated with the destination port to match: ftp, ftpdata, http,
smtp, snmp, telnet, tftp, www. Each of these keywords translates into its equivalent port number.
◦
Custom
—
Enter the IANA port number to match to the destination port identified in the datagram header.
The port range is from 0 to 65535 and includes three different types of ports:
◦
0 to 1023
—
Well known ports
◦
1024 to 49151
—
Registered ports
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
70
Access Control
Configure IPv6 ACLs