Cisco DS-C9124-K9 Troubleshooting Guide - Page 442

Overview Chapter 21 Troubleshooting IP Access Lists Send documentation comments to [email protected] Address Information For IPv4, specify the source and source-wildcard or the destination and destination-wildcard in one of two ways: • Use the 32-bit quantity in four-part, dotted decimal format (10.1.1.2 0.0.0.0 is the same as host 10.1.1.2). - Each wildcard bit set to zero indicates that the corresponding bit position in the packet's IPv4 address must exactly match the bit value in the corresponding bit position in the source. - Each wildcard bit set to one indicates that both a zero bit and a one bit in the corresponding position of the packet's IPv4 address will be considered a match to this access list entry. Place ones in the binary bit positions you want to ignore and then convert to decimal. For example, use 0.0.255.255 to require an exact match of only the first 16 bits of the source. Wildcard bits set to one must be contiguous and at the end of the prefix. For example, a wildcard of 0.255.0.64 would not be valid. • Use the any option as an abbreviation for a source and source-wildcard or destination and destination-wildcard (0.0.0.0 255.255.255.255) For IPv6, specify the source or the destination IPv6 addresses in one of two ways: • Use the 128-bit quantity in colon-separated hexadecimal / format. For example, use 2001:0DB8:800:200C::/64 to require an exact match of the first 64 bits of the source. • Use the any option as an abbreviation for a source or destination. Port Information To compare the source and destination ports, use the eq (equal) option, the gt (greater than) option, the lt (less than) option, or the range (range of ports) option. Table 21-1 displays the port numbers recognized by the Cisco SAN-OS software for associated TCP and UDP ports for IPv4. Note IPv6-ACL CLI commands do not support TCP or UDP port names. Table 21-1 Protocol UDP TCP and UDP Port Numbers for IPv4 Port dns tftp ntp radius accounting radius authentication snmp snmp-trap syslog Number 53 69 123 1646 or 1813 1645 or 1812 161 162 514 21-2 Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x OL-9285-05