Cisco Cisco Access Registrar 4.2 Specifikace stáhnout pdf (Strana 225)

100

101

5-41

Cisco Wireless LAN Controller Configuration Guide

OL-13826-01

Chapter 5 Configuring Security Solutions

Configuring and Applying Access Control Lists

e. If you chose TCP or UDP in the previous step, two additional parameters appear: Source Port and

Destination Port. These parameters enable you to choose a specific source port and destination port

or port ranges. The port options are used by applications that send and receive data to and from the

networking stack. Some ports are designated for certain applications such as telnet, ssh, http, and so

on.

f. From the DSCP drop-down box, choose one of these options to specify the differentiated services

code point (DSCP) value of this ACL. DSCP is an IP header field that can be used to define the

quality of service across the Internet.

• Any—Any DSCP (This is the default value.)

• Specific—A specific DSCP from 0 to 63, which you enter in the DSCP edit box

g. From the Direction drop-down box, choose one of these options to specify the direction of the traffic

to which this ACL applies:

• Any—Any direction (This is the default value.)

• Inbound—From the client

• Outbound—To the client

Note If you are planning to apply this ACL to the controller CPU, choose Any or Inbound

because a CPU ACL applies only to packets that are sent to the CPU, not packets from the

CPU.

h. From the Action drop-down box, choose Deny to cause this ACL to block packets or Permit to cause

this ACL to allow packets. The default value is Deny.

i. Click Apply to commit your changes. The Access Control Lists > Edit page reappears, showing the

rules for this ACL. See Figure 5-26.

Figure 5-26 Access Control Lists > Edit Page

The Deny Counters field shows the number of times that packets have matched the explicit deny

ACL rule. The Number of Hits field shows the number of times that packets have matched an ACL

rule. You must enable ACL counters on the Access Control Lists page to enable these fields.

1 2 ... 220 221 222 223 224 225 226 227 228 229 230 ... 635 636

Komentáře k této Příručce

Žádné komentáře

Cisco Cisco Access Registrar 4.2 Specifikace Strana 225

Komentáře k této Příručce