Cisco Systems 2.5 Network Router User Manual


  Open as PDF
of 1002
 
32-5
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter 32 ACL Editor
Rules Windows
Used By
The name of the interface or VTY numbers to which this rule has been applied.
Type
The type of rule, either standard or extended.
Standard rules compare a packet’s source IP address against its IP address criteria
to determine a match. The rule’s IP address criteria can be a single IP address, or
portions of an IP address, defined by a wildcard mask.
Extended rules can examine a greater variety of packet fields to determine a
match. Extended rules can examine both the packet’s source and destination IP
addresses, the protocol type, the source and destination ports, and other packet
fields.
Access rules can be either standard rules or extended rules. IPSec rules have to
extended rules because they must be able to specify a service type. Externally
defined and unsupported rules may be either standard or extended.
Description
A description of the rule, if one has been entered.
First Column (Rule Entry Area)
Action
The action to take when a packet matching the criteria in this entry arrives on the
interface. Either Permit or Deny:
Permit—Allow traffic matching the criteria in this row.
Deny—Do not allow traffic matching the criteria in this row.
Click Meanings of the Permit and Deny Keywords to learn more about the action
of permit and the action of deny in the context of a specific type of rule.
Permit traffic.
Deny traffic.