Brocade 6910 Ethernet Access Switch Configuration Guide (Supporting R2.2.0.0) - Manual (Page 946)

890 Brocade 6910 Ethernet Access Switch Configuration Guide
53-1002651-02
42
Access Control Lists
• 32 (urg) – Urgent pointer
For example, use the code value and mask below to catch packets with the following flags set:
• SYN flag valid, use control-code 2, control bit mask 2
• Both SYN and ACK valid, use control-code 18, control bit mask 18
• SYN valid and ACK invalid, use control-code 2, control bit mask 18
• Time Range – Name of a time range.
Interface
To add rules to an Extended IPv4 ACL:
1. Click Security, ACL.
2. Select Configure ACL from the Step list.
3. Select Add Rule from the Action list.
4. Select IP Extended from the Type list.
5. Select the name of an ACL from the Name list.
6. Specify the action (i.e., Permit or Deny).
7. Select the address type (Any, Host, or IP).
8. If you select “Host,” enter a specific address. If you select “IP,” enter a subnet address and the
mask for an address range.
9. Set any other required criteria, such as service type, protocol type, or control code.
10. Click Apply.
FIGURE 209 Configuring an Extended IPv4 ACL