C
ONFIGURING
THE
S
WITCH
3-112
Specifying the Mask Type
Use the ACL Mask Configuration page to edit the mask for the Ingress IP
ACL, Egress IP ACL, Ingress MAC ACL or Egress MAC ACL.
Web – Click Security, ACL, Mask Configuration. Click Edit for one of the
basic mask types to open the configuration page.
Figure 3-49 Selecting ACL Mask Types
CLI – This example creates an IP ingress mask, and then adds two rules.
Each rule is checked in order of precedence to look for a match in the
ACL entries. The first entry matching a mask is applied to the inbound
packet.
Console(config)#access-list ip mask-precedence in 4-122
Console(config-ip-mask-acl)#mask host any 4-123
Console(config-ip-mask-acl)#mask 255.255.255.0 any
Console(config-ip-mask-acl)#