<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:54" />
    <title>Creating IPv4-ACLs or IPv6-ACLs with the IP-ACL Wizard </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1711;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1073258"> </a><h1 class="pTitle">
Creating IPv4-ACLs or IPv6-ACLs with the IP-ACL Wizard

</h1>
<a name="wp1073259"> </a><p class="pBody">
Traffic coming into the switch is compared to IPv4-ACL or IPv6-ACL filters based on the order that the 
filters occur in the switch. New filters are added to the end of the IPv4-ACL or the IPv6-ACL. The switch 
keeps looking until it has a match. If no matches are found when the switch reaches the end of the filter, 
the traffic is denied. For this reason, you should have the frequently hit filters at the top of the filter. 
There is an <em class="cEmphasis">implied deny</em> for traffic that is not permitted. A single-entry IPv4-ACL or IPv6-ACL with 
only one deny entry has the effect of denying all traffic. 

</p>
<a name="wp1077000"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1096518"> </a><p class="pBody">
To configure an IPv4-ACL or an IPv6-ACL, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1073261"> </a><li class="pSmartList1">Create an IPv4-ACL or an IPv6-ACL by specifying a filter name and one or more access condition(s). 
Filters require the source and destination address to match a condition. Use optional keywords to 
configure finer granularity.
</li>
<a name="wp1073262"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> The filter entries are executed in sequential order. You can only add the entries to the end of the 
list. Take care to add the entries in the correct order.

</p>
<a name="wp1073263"> </a><li class="pSmartList1">Apply the access filter to specified interfaces.
</li>
</ol></div>
<a name="wp1104609"> </a><p class="pBody">
To create an ordered list of IP filters in a named IPv4-ACL or IPv6-ACL profile using the IPv4-ACL 
Wizard, follow these steps:

</p>
<a name="wp1104610"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1104614"> </a><li class="pSmartList1">Click the<span style="font-weight: bold"> </span><b style="font-weight: bold" class="cBold">IP ACL Wizard</b><span style="font-weight: bold"> </span>icon<span style="font-weight: bold"> </span>from the DCNM-SAN toolbar.
</li>
<a name="wp1104621"> </a><p class="pListBodyLevel1">
You see the IP ACL Wizard.

</p>
<a name="wp1104623"> </a><li class="pSmartList1">Enter a name for the IP-ACL.
</li>
<a name="wp1104624"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> If you are creating an IPv6-ACL, check the IPv6 check box.

</p>
<a name="wp1104626"> </a><li class="pSmartList1">Click <b class="cBold">Add</b> to add a new rule to this IP-ACL. You see a new rule in the table with default values.
</li>
<a name="wp1104627"> </a><li class="pSmartList1">Modify the<span style="font-weight: bold"> </span>Source IP and Source Mask as necessary for your filter.
</li>
<a name="wp1104628"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> The IP-ACL Wizard only creates inbound IP filters.

</p>
<a name="wp1104629"> </a><li class="pSmartList1">Choose the appropriate filter type from the Application drop-down list.
</li>
<a name="wp1104631"> </a><li class="pSmartList1">Choose<span style="font-weight: bold"> </span><b class="cBold">permit </b>or <b class="cBold">deny</b> from the Action drop-down list.
</li>
<a name="wp1104638"> </a><li class="pSmartList1">Repeat <a href="ipacl11.html#wp1104626">Step&#160;3</a> through <a href="ipacl11.html#wp1104631">Step&#160;6</a> for additional IP filters.
</li>
<a name="wp1104639"> </a><li class="pSmartList1">Click <b class="cBold">Up </b>or <b class="cBold">Down</b> to order the filters in this IP-ACL. 
</li>
<a name="wp1104640"> </a><p class="pBodyAutonumRel">
<strong>Tip	&nbsp;&nbsp;&nbsp;</strong> Order the IP filters carefully. Traffic is compared to the IP filters in order. The first match is 
applied and the rest are ignored.

</p>
<a name="wp1104641"> </a><li class="pSmartList1">Click <b class="cBold">Next</b>. 
</li>
<a name="wp1104642"> </a><p class="pListBodyLevel1">
You see a list of switches that you can apply this IP-ACL.

</p>
<a name="wp1104643"> </a><li class="pSmartList1">Uncheck any switches that you do not want to apply this IP-ACL.
</li>
<a name="wp1104644"> </a><li class="pSmartList1">Select the <b class="cBold">Interface </b>you want to apply this IP-ACL.
</li>
<a name="wp1104645"> </a><li class="pSmartList1">Click <b class="cBold">Finish</b> to create this IP-ACL and apply it to the selected switches.
</li>
</ol></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
