Cisco WAP571, Руководство администратора

Страница: 140 / 192

ACL
ACL Rule
Cisco WAP571/E Administration Guide 140
9
• Destination Port —Includes a destination port in the match condition for the
rule. The destination port is identified in the datagram header.
- Select From List —If selected, choose the port name from the list.
- Match to Port —Enter the IANA port number to match to the source port
identified in the datagram header. The port range is 0 to 65535 and
includes three different types of ports:
0 to 1023-Well Known Ports
1024 to 49151-Registered Ports
49152 to 65535-Dynamic and/or Private Ports
- Mask —Enter the port mask. The mask determines which bits are used
and which bits are ignored. Only the hexadecimal digit (0 - 0xFFFF) is
allowed. 0 means the bit matters and 1 means that we should ignore this
bit.
• IPv6 Flow Label —Specifies a 20-bit number that is unique to an IPv6
packet. It is used by end stations to signify QoS handling in routers (range 0
to 1048575).
• IPv6 DSCP —Matches the packets based on their IP DSCP value. If
selected, choose one of these options as the match criteria:
- Select From List —Choose one of these values: DSCP Assured
Forwarding (AS), Class of Service (CS), or Expedited Forwarding (EF).
- Match to Value —Enter a custom DSCP value, from 0 to 63.
STEP 6
Click Save . The changes are saved to the Startup Configuration.
NOTE
To delete an ACL, ensure that it is selected in the ACL Name-ACL Type list, check
Delete ACL, and click Save.
Configure MAC ACLs
To configure a MAC ACL:
STEP 1
Select ACL > ACL Rule .
STEP 2
In the ACL Name field, enter the name to identify the ACL.