Product guide
mask, CIDR … 10-45
mask, defined … 10-8
mask, multiple IP addresses … 10-36
mask, one IP address … 10-35
mask, per-port, defined … 10-9
match, always … 10-44
match, criteria … 10-34
match, example … 10-35
match, ignored … 10-29
maximum allowed … 10-30
name string, maximum characters … 10-38,
10-47
number of entries … 10-11
offline creation … 10-72
operator, comparison … 10-54
outbound traffic, defined … 10-9
oversubscribing resources … 10-22
packet match, defining … 10-26
performance degraded … 10-12
permit, defined … 10-9
per-port application … 10-18
per-port mask … 10-9
per-port rule
See rules.
planning … 10-12, 10-17
policies … 10-17
policy application points … 10-5
prioritizing feature usage … 10-18
purpose … 10-4
recommended use … 10-4
replacing … 10-30
resource usage … 10-17, 10-18
resource usage, help display … 10-22
resource use, example … 10-25
resource use, troubleshooting … 10-23
resource, display current use … 10-22
routed traffic … 10-31
rule and mask usage … 10-18
rules, configuration … 10-30
rules, maximum available … 10-18
rules, operation … 10-30
SA, defined … 10-9
security use … 10-5, 10-28
security use, caution … 10-29
See also ACL-5300xl.
sequence, ACEs … 10-44
source routing, caution … 10-12, 10-38
standard ACL, resource use … 10-21
standard, defined … 10-10, 10-38
standard, example … 10-49
standard, resource use … 10-19
standard, structure … 10-40
standard, use … 10-10, 10-47
static VLAN requirement … 10-12, 10-30, 10-31
supernetting … 10-33
supersede implicit deny any … 10-42
switched packets … 10-15
syntax
See command syntax.
Syslog
See ACL-3400cl/6400cl, logging.
TCP or UDP port number, IANA … 10-55
terms … 10-7
traffic types filtered … 10-5, 10-12
types, defined … 10-38
using fewer masks … 10-24
VLAN assignment … 10-13
VLANs … 10-30
where applied to traffic … 10-13, 10-31
wildcard … 10-8, 10-34, 10-35
wildcard, defined … 10-10
ACL-3400cl/6400cl, standard numeric I.D.
range … 10-38
ACL-5300xl
ACE sequence … 9-32
See ACL-5300xl , sequence, ACEs.
ACE, defined … 9-5
ACE, duplicates … 9-32
ACE, limit … 9-18
ACE, order in list
See sequence, ACEs.
ACE,after match not used … 9-29
ACL ID, defined … 9-5
ACL log message
See ACL-5300xl, logging.
ACL, defined … 9-5
applied to open connection … 9-63
assign nonexistent i.d. … 9-31
assign to VLAN … 9-31
basic structure … 9-26
broadcasts, effect on … 9-63
CIDR, mask … 9-32, 9-34
command summary … 9-4
command syntax … 9-34
configuration planning … 9-10
configured but not used … 9-31
2 – Index