CLI Reference Guide

312 CHAPTER 7: CONFIGURING AUTHENTICATION, AUTHORIZATION, AND ACCOUNTING PARAMETERS
 Range — Packets are filtered for ports that are between the source
port name or number and the end of the range. Go to step 10.
9 In the Port Name list, select a TCP or UDP source port name.
To specify the source port by its port number, select Other and go to
step 10.
The source port number must be lower than the destination port number.
10 In the Port Number list, specify a TCP or UDP source port number.
For a complete list of port numbers, see
www.iana.org/assignments/port-numbers.
11 If you specified a port range as the operator, you must specify the end
value for the range. In the Range End box, specify an ending port number
for the range.
12 To define a destination port, repeat step 9 and step 10.
13 Click Finish.
Creating an ICMP ACE
To create an ICMP ACE:
1 In the ACL Setup page of the Create ACL wizard, click New. A list of
ACEs appears.
2 Select New ICMP ACE. The Create ICMP ACE dialog box appears.
To define the action of the ACE
1 In the Action list, select Permit to allow access if the conditions in the
ACE are matched, or Deny to refuse access if the conditions are
matched.
2 If you select Permit, in the CoS box, specify a class-of-service level for
packets. For information, see step 4 in “Creating an IP ACE” on
page 309.
3 To enable counting of packets filtered by an ACL, select Enable Hit
Count.
4 Define the IP attributes (source and destination IP addresses, the TOS, and
the precedence). The steps are the same as the steps when configuring
an IP ACE. See step 6 on page 309 through step 9 on page 310.
5 In the Type box, specify the ICMP type used to filter ICMP packets.