HP Cisco MDS 9120 Cisco MDS 9000 Family Fabric Manager Configuration Guide, Re - Page 803

Chapter 42 Configuring IPv4 and IPv6 Access Control Lists About Filter Contents Send documentation comments to [email protected] Address Information The address information is required in each filter. It identifies the following details: • Source: The address of the network or host from which the packet is being sent. • Source-wildcard: The wildcard bits applied to the source. • Destination: The number of the network or host to which the packet is being sent. • Destination-wildcard: The wildcard bits applied to the destination. Specify the source and source-wildcard or the destination and destination-wildcard in one of two ways: • Using the 32-bit quantity in four-part, dotted decimal format (10.1.1.2/0.0.0.0 is the same as host 10.1.1.2). - Each wildcard bit set to zero indicates that the corresponding bit position in the packet's IPv4 address must exactly match the bit value in the corresponding bit position in the source. - Each wildcard bit set to one indicates that both a zero bit and a one bit in the corresponding position of the packet's IPv4 or IPv6 address will be considered a match to this access list entry. Place ones in the bit positions you want to ignore. For example, 0.0.255.255 requires an exact match of only the first 16 bits of the source. Wildcard bits set to one do not need to be contiguous in the source-wildcard. For example, a source-wildcard of 0.255.0.64 would be valid. • Using the any option as an abbreviation for a source and source-wildcard or destination and destination-wildcard (0.0.0.0/255.255.255.255) Port Information The port information is optional. To compare the source and destination ports, use the eq (equal) option, the gt (greater than) option, the lt (less than) option, or the range (range of ports) option. You can specify the port information in one of two ways: • Specify the number of the port. Port numbers range from 0 to 65535. Table 42-1 displays the port numbers recognized by the Cisco SAN-OS software for associated TCP and UDP ports. • Specify the name of a TCP or UDP port as follows: - TCP port names can only be used when filtering TCP. - UDP port names can only be used when filtering UDP. Table 42-1 TCP and UDP Port Numbers Protocol UDP Port dns tftp ntp radius accounting radius authentication snmp snmp-trap syslog Number 53 69 123 1646 or 1813 1645 or 1812 161 162 514 OL-16184-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family CLI Configuration Guide 42-3