Cisco Cisco WAP571E Wireless-AC N Premium Dual Radio Outdoor Access Point Manual De Mantenimiento
ACL
ACL Rule
Cisco WAP571/E Administration Guide
139
9
•
When you choose Deny, the rule blocks all traffic that meets the rule criteria
from entering the WAP device. Traffic that does not meet the criteria is
forwarded unless this rule is the final rule. Because there is an implicit deny
all rule at the end of every ACL, traffic that is not explicitly permitted is
dropped.
from entering the WAP device. Traffic that does not meet the criteria is
forwarded unless this rule is the final rule. Because there is an implicit deny
all rule at the end of every ACL, traffic that is not explicitly permitted is
dropped.
•
Match Every Packet—If enabled, the rule, which either has a permit or
deny action, matches the frame or packet regardless of its contents. If you
enable this feature, you cannot configure any additional match criteria. This
option is selected by default for a new rule. You must disable the option to
configure other match fields.
deny action, matches the frame or packet regardless of its contents. If you
enable this feature, you cannot configure any additional match criteria. This
option is selected by default for a new rule. You must disable the option to
configure other match fields.
•
Protocol—Choose the protocol to match by keyword or protocol ID.
•
Source IPv6—Requires a packet's source IPv6 address to match the IPv6
address defined in the appropriate fields.
address defined in the appropriate fields.
-
Source IPv6 Address—Enter the IPv6 address to apply this criteria.
-
Source IPv6 Prefix Length—Enter the prefix length of the source IPv6
address.
address.
•
Source Port—Includes a source port in the match condition for the rule.
The source port is identified in the datagram header.
The source port is identified in the datagram header.
-
Select From List—If selected, choose the port name from the list.
-
Match to Port—Enter the IANA port number to match to the source port
identified in the datagram header. The port range is 0 to 65535 and
includes three different types of ports:
identified in the datagram header. The port range is 0 to 65535 and
includes three different types of ports:
0 to 1023-Well Known Ports
1024 to 49151-Registered Ports
49152 to 65535-Dynamic and/or Private Ports
-
Mask—Enter the port mask. The mask determines which bits are used
and which bits are ignored. Only the hexadecimal digit (0 - 0xFFFF) is
allowed. 0 means the bit matters and 1 means that we should ignore this
bit.
and which bits are ignored. Only the hexadecimal digit (0 - 0xFFFF) is
allowed. 0 means the bit matters and 1 means that we should ignore this
bit.
•
Destination IPv6—Requires a packet's destination IPv6 address to match
the IPv6 address defined in the appropriate fields.
the IPv6 address defined in the appropriate fields.
-
Destination IPv6 Address—Enter an IPv6 address to apply this criteria.
-
Destination IPv6 Prefix Length—Enter the prefix length of the
destination IPv6 address.
destination IPv6 address.