ProCurve 6200yl User's Guide download pdf (Page 352)

100

101

10-66

Access Control Lists (ACLs)

Configuring Extended ACLs

< any | host < DA > | DA/mask-length | DA/ < mask >>

This is the second instance of IP addressing in an extended

ACE. It follows the first (SA) instance, described earlier, and

defines the destination IP address (DA) that a packet must

carry in order to have a match with the ACE.

• any — Allows routed IP packets to any DA.

• host < DA > — Specifies only packets having DA as the

destination address. Use this criterion when you want to

match only the IP packets for a single DA.

• DA/mask-length or DA< mask > — Specifies packets intended

for a destination address, where the address is either a

subnet or a group of IP addresses. The mask format can be

in either dotted-decimal format or CIDR format (number of

significant bits). Refer to “Using CIDR Notation To Enter the

ACL Mask” on page 10-50.

DA Mask Application: The mask is applied to the DA in

the ACL to define which bits in a packet’s DA must exactly

match the DA configured in the ACL and which bits need

not match. See also the above example and note.

[ precedence < 0 - 7 | precedence-name >]

This option can be used after the DA to cause the ACE to match

packets with the specified IP precedence value. Values can be

entered as the following IP precedence numbers or alphanu-

meric names:

0 or routine

1 “ priority

2 “ immediate

3 “ flash

4 “ flash-override

5 “ critical

6 “ internet (for internetwork control)

7 “ network (for network control)

Note: The precedence criteria described in this section are

applied in addition to

any other selection criteria configured

in the same ACE.

1 2 ... 347 348 349 350 351 352 353 354 355 356 357 ... 595 596

Comments to this Manuals

No comments

ProCurve 6200yl User's Guide Page 352

Comments to this Manuals

Related products and manuals for Network switches ProCurve 6200yl