<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:54" />
    <title>Creating IPv4-ACLs or IPv6-ACLs </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1712;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1073362"> </a><h1 class="pTitle">
Creating IPv4-ACLs or IPv6-ACLs

</h1>
<a name="wp1077052"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1104652"> </a><p class="pBody">
To add entries to an existing IPv4-ACL or an IPv6-ACL using Device Manager, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1104653"> </a><li class="pSmartList1">Choose <b style="font-weight: bold" class="cBold">Security</b><span style="font-weight: bold"> &gt; </span><b style="font-weight: bold" class="cBold">IP ACL</b><span style="font-weight: bold">.
</span></li>
<a name="wp1104654"> </a><li class="pSmartList1">Click <b style="font-weight: bold" class="cBold">Create</b><span style="font-weight: bold"> </span>to create an IP-ACL profile.
</li>
<a name="wp1104655"> </a><p class="pListBodyLevel1">
You see the Create IP ACL Profiles dialog box. Enter an IP-ACL profile name.

</p>
<a name="wp1104656"> </a><li class="pSmartList1">Click <b style="font-weight: bold" class="cBold">Create</b><span style="font-weight: bold"> </span>and then click <b class="cBold">Close</b>.
</li>
<a name="wp1104657"> </a><p class="pListBodyLevel1">
This creates a new IP-ACL profile.

</p>
<a name="wp1104658"> </a><li class="pSmartList1">Click the IP-ACL you created and click <b class="cBold">Rules</b>. 
</li>
<a name="wp1104660"> </a><p class="pListBodyLevel1">
After you create an IPv4-ACL or an IPv6-ACL, you can add subsequent IP filters at the end of the 
IPv4-ACL or the IPv6-ACL if you are using Device Manager. DCNM-SAN allows you to reorder 
existing rules for a profile. You cannot insert filters in the middle of an IPv4-ACL or an IPv6-ACL. Each 
configured entry is automatically added to the end of a IPv4-ACL or an IPv6-ACL.

</p>
<a name="wp1104661"> </a><li class="pSmartList1">Click <b class="cBold">Create </b>to create an IP filter. 
</li>
<a name="wp1104662"> </a><li class="pSmartList1">Choose either <b class="cBold">permit </b>or <b style="font-weight: bold" class="cBold">deny</b><span style="font-weight: bold"> </span>for<span style="font-weight: bold"> </span>the Action and set the IP Number in the Protocol field. The drop-down 
menu provides common filtered protocols.
</li>
<a name="wp1104664"> </a><li class="pSmartList1">Set the source IP address you want this filter to match against and the wildcard mask, or check the <b class="cBold">any</b> 
check box to match this filter against any IP address. 
</li>
<a name="wp1104665"> </a><p class="pListBodyLevel1">
This creates an IP filter that will check the source IP address of frames.

</p>
<a name="wp1104666"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> The wildcard mask denotes a subset of the IP address you want to match against. This allows a 
range of addresses to match against this filter.

</p>
<a name="wp1104668"> </a><li class="pSmartList1">Set the transport layer source port range if the protocol chosen is TCP or UDP. 
</li>
<a name="wp1104675"> </a><li class="pSmartList1">Repeat <a href="ipacl12.html#wp1104664">Step&#160;7</a> and <a href="ipacl12.html#wp1104668">Step&#160;8</a> for the destination IP address and port range. 
</li>
<a name="wp1104676"> </a><p class="pListBodyLevel1">
This creates an IP filter that will check the destination IP address of frames.

</p>
<a name="wp1104677"> </a><li class="pSmartList1">Set the ToS, ICMPType, and ICMPCode fields as appropriate.
</li>
<a name="wp1104678"> </a><li class="pSmartList1">Check the<b class="cBold"> TCPEstablished</b> check box if you want to match TCP connections with 
ACK,FIN,PSH,RST,SYN or URG control bits set.
</li>
<a name="wp1104679"> </a><li class="pSmartList1">Check the <b class="cBold">LogEnabled</b> check box if you want to log all frames that match this IP filter.
</li>
<a name="wp1104680"> </a><li class="pSmartList1">Click <b class="cBold">Create </b>to create this IP filter and add it to your IP-ACL.
</li>
</ol></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
