Troubleshooting guide

1-8
Cisco Wide Area Application Services Configuration Guide
OL-26579-01
Chapter 1 Creating and Managing IP Access Control Lists for WAAS Devices
List of Extended IP ACL Conditions
Table 1-4 Extended IP ACL Generic Condition
Field Default Value Description
Purpose
1
1. Required field.
Permit Specifies whether a packet is to be passed (Permit) or
dropped (Deny).
Extended Type
1
Generic Matches any Internet protocol.
Protocol ip Internet protocol (gre, icmp, ip, tcp, or udp). To match
any Internet protocol, use the keyword ip.
Source IP
1
0.0.0.0 Number of the network or host from which the packet is
being sent, specified as a 32-bit quantity in 4-part dotted
decimal format.
Source IP Wildcard
1
255.255.255.255 Wildcard bits to be applied to the source, specified as a
32-bit quantity in 4-part dotted decimal format. Place a 1
in the bit positions that you want to ignore and identify
bits of interest with a 0.
Destination IP 0.0.0.0 Number of the network or host to which the packet is
being sent, specified as a 32-bit quantity in 4-part dotted
decimal format.
Destination IP
Wildcard
255.255.255.255 Wildcard bits to be applied to the source, specified as a
32-bit quantity in 4-part dotted decimal format. Place a 1
in the bit positions that you want to ignore and identify
bits of interest with a 0.
Table 1-5 Extended IP ACL TCP Condition
Field Default Value Description
Purpose
1
Permit Specifies whether a packet is to be passed (Permit) or
dropped (Deny).
Extended Type
1
TCP Matches the TCP Internet protocol.
Established Unchecked (false) When checked, a match with the ACL condition occurs
if the TCP datagram has the ACK or RST bits set,
indicating an established connection. Initial TCP
datagrams used to form a connection are not matched.
Source IP
1
0.0.0.0 Number of the network or host from which the packet is
being sent, specified as a 32-bit quantity in 4-part dotted
decimal format.
Source IP Wildcard
1
255.255.255.255 Wildcard bits to be applied to the source, specified as a
32-bit quantity in 4-part dotted decimal format. Place a 1
in the bit positions that you want to ignore and identify
bits of interest with a 0.
Source Port 1 0 Decimal number or name of a TCP port. Valid port
numbers are 0 to 65535. Valid TCP port names are as
follows: ftp, ftp-data, https, mms, netbios-dgm,
netbios-ns, netbios-ss, nfs, rtsp, ssh, telnet, and www.