> # Creating IPv4-ACLs or IPv6-ACLs

> ## Detailed Steps

> To add entries to an existing IPv4-ACL or an IPv6-ACL using Device Manager, follow these steps:

> 1. Choose Security > IP ACL.
> 2. Click Create to create an IP-ACL profile.

> You see the Create IP ACL Profiles dialog box. Enter an IP-ACL profile name.

> 3. Click Create and then click Close.

> This creates a new IP-ACL profile.

> 4. Click the IP-ACL you created and click Rules.

> After you create an IPv4-ACL or an IPv6-ACL, you can add subsequent IP filters at the end of the IPv4-ACL or the IPv6-ACL if you are using Device Manager. DCNM-SAN allows you to reorder existing rules for a profile. You cannot insert filters in the middle of an IPv4-ACL or an IPv6-ACL. Each configured entry is automatically added to the end of a IPv4-ACL or an IPv6-ACL.

> 5. Click Create to create an IP filter.
> 6. Choose either permit or deny for the Action and set the IP Number in the Protocol field. The drop-down menu provides common filtered protocols.
> 7. Set the source IP address you want this filter to match against and the wildcard mask, or check the any check box to match this filter against any IP address.

> This creates an IP filter that will check the source IP address of frames.

> Note The wildcard mask denotes a subset of the IP address you want to match against. This allows a range of addresses to match against this filter.

> 8. Set the transport layer source port range if the protocol chosen is TCP or UDP.
> 9. Repeat Step 7 and Step 8 for the destination IP address and port range.

> This creates an IP filter that will check the destination IP address of frames.

> 10. Set the ToS, ICMPType, and ICMPCode fields as appropriate.
> 11. Check the TCPEstablished check box if you want to match TCP connections with ACK,FIN,PSH,RST,SYN or URG control bits set.
> 12. Check the LogEnabled check box if you want to log all frames that match this IP filter.
> 13. Click Create to create this IP filter and add it to your IP-ACL.

> Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.