Cisco Cisco Packet Data Gateway (PDG) Fehlerbehebungsanleitung
Access Control Lists
▀ Understanding ACLs
▄ Cisco ASR 5000 Series Session Control Manager Administration Guide
OL-22952-01
Keyword/Variable
Description
The IP address(es) from which the packet originated. This option is used to filter all packets from a specific IP
address or a group of IP addresses. When specifying a group of addresses, the initial address is configured
using this option. The range can then be configured using the
address or a group of IP addresses. When specifying a group of addresses, the initial address is configured
using this option. The range can then be configured using the
parameter.
This option is used in conjunction with the
option to specify a group of addresses for which
packets are to be filtered. The mask must be entered as a complement:Zero-bits in this parameter mean that the
corresponding bits configured for the
corresponding bits configured for the
parameter must be identical. One-bits in this parameter
mean that the corresponding bits configured for the
parameter must be ignored.
I
MPORTANT
:
The mask must contain a contiguous set of one-bits from the least significant bit
(LSB). Therefore, allowed masks are 0, 1, 3, 7, 15, 31, 63, 127, and 255. For example, acceptable
wildcards are 0.0.0.3, 0.0.0.255, and 0.0.15.255. A wildcard of 0.0.7.15 is not acceptable since the
one-bits are not contiguous.
wildcards are 0.0.0.3, 0.0.0.255, and 0.0.15.255. A wildcard of 0.0.7.15 is not acceptable since the
one-bits are not contiguous.
Source AoR
The rule applies to specific packets originating from a specific source address of record.
The following syntax is used when configuring rule criteria that apply to source AoRs:
Keyword/Variable
Description
The address of record from which the packet originated.This option is used to filter all packets from a specific
address of record or a group of AoRs. When specifying a group of addresses, the initial address is configured
using this parameter. The range can then be configured using the
address of record or a group of AoRs. When specifying a group of addresses, the initial address is configured
using this parameter. The range can then be configured using the
parameter.
This option is used in conjunction with the
option to specify a group of addresses for which packets are to
be filtered. The mask must be entered as a complement:Zero-bits in this parameter mean that the
corresponding bits configured for the
corresponding bits configured for the
parameter must be identical. One-bits in this parameter mean that
the corresponding bits configured for the
parameter must be ignored.
I
MPORTANT
:
The mask must contain a contiguous set of one-bits from the least significant bit
(LSB). Therefore, allowed masks are 0, 1, 3, 7, 15, 31, 63, 127, and 255. For example, acceptable
wildcards are 0.0.0.3, 0.0.0.255, and 0.0.15.255. A wildcard of 0.0.7.15 is not acceptable since the
one-bits are not contiguous.
wildcards are 0.0.0.3, 0.0.0.255, and 0.0.15.255. A wildcard of 0.0.7.15 is not acceptable since the
one-bits are not contiguous.
Destination AoR
The rule applies to specific packets sent to a specific destination address of record.