Installation manual

3-110
SIGNAMAX LLC • www.signamax.eu
• Subnet Mask – A subnet mask containing four integers from 0 to 255, each separated
by a period. The mask uses 1 bits to indicate “match” and 0 bits to indicate “ignore.” The
mask is bitwise ANDed with the specified source IP address, and compared with the
address for each IP packet entering the port(s) to which this ACL has been assigned.
Web – Specify the action (i.e., Permit or Deny). Select the address type (Any, Host, or IP).
If you select “Host,” enter a specific address. If you select “IP,” enter a subnet address
and the mask for an address range. Then click Add.
Figure 3-65 Configuring Standard IP ACLs
CLI – This example configures one permit rule for the specific address 10.1.1.21 and
another rule for the address range 168.92.16.x – 168.92.31.x using a bitmask.
Configuring an Extended IP ACL
Command Attributes
• Action – An ACL can contain any combination of permit or deny rules.
• Source/Destination Address Type – Specifies the source or destination IP address.
Use “Any” to include all possible addresses, “Host” to specify a specific host address in
the Address field, or “IP” to specify a range of addresses with the Address and SubMask
fields. (Options: Any, Host, IP; Default: Any)
• Source/Destination IP Address – Source or destination IP address.
• Source/Destination Subnet Mask – Subnet mask for source or destination address.
(See the description for Subnet Mask on page 3-109.)
• Service Type – Packet priority settings based on the following criteria:
- TOS – Type of Service level. (Range: 0-15)
- Precedence – IP precedence level. (Range: 0-7)
Console(config-std-acl)#permit host 10.1.1.21 4-176
Console(config-std-acl)#permit 168.92.16.0 255.255.240.0
Console(config-std-acl)#