Table of Contents
Advertisement
Chapter 32
ACL Editor
Used By
Type
Description
First Column (Rule Entry Area)
Action
OL-4015-12
The name of the interface or VTY numbers to which this rule has been applied.
The type of rule, either standard or extended.
Standard rules compare a packet's source IP address against its IP address criteria
to determine a match. The rule's IP address criteria can be a single IP address, or
portions of an IP address, defined by a wildcard mask.
Extended rules can examine a greater variety of packet fields to determine a
match. Extended rules can examine both the packet's source and destination IP
addresses, the protocol type, the source and destination ports, and other packet
fields.
Access rules can be either standard rules or extended rules. IPSec rules have to
extended rules because they must be able to specify a service type. Externally
defined and unsupported rules may be either standard or extended.
A description of the rule, if one has been entered.
Permit traffic.
Deny traffic.
The action to take when a packet matching the criteria in this entry arrives on the
interface. Either Permit or Deny:
Permit—Allow traffic matching the criteria in this row.
•
Deny—Do not allow traffic matching the criteria in this row.
•
Click
Meanings of the Permit and Deny Keywords
of permit and the action of deny in the context of a specific type of rule.
Cisco Router and Security Device Manager 2.5 User's Guide
Rules Windows
to learn more about the action
32-5
Advertisement
Table of Contents
Troubleshooting
