Chapter32 ACL Editor
Rules Windows
32-4
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
•QoS Rules window—Rules that specify traffic that should belong to the
QoS Class that the rule is associated with.
•Unsupported Rules window—Unsupported rules contain syntax or
keywords that Cisco SDM does not support. Unsupported rules may
affect the way the router operates, but are marked as read-only by Cisco
SDM.
•Externally Defined Rules window—Externally defined rules are those
that Cisco SDM was not used to create.
•Cisco SDM Default Rules window—Cisco SDM default rules are
pre-defined access rules. They are used in guided first-time
configurations, and you can use them in configurations t hat you create.
•NAC Rules window. NAC rules are used in the NAC exception policy to
specify hosts that are to be exempted from the NAC validation process.
They are also used to define the hosts or networks for admission control.
The upper portion of the screen lists the access rules that have been configured on
this router. This list does not contain Cisco SDM default rules. To view Cisco
SDM default rules, click the SDM Default Rules branch of the Rules tree.
The lower portion of the window lists the rule entries associated with the selected
rule. A rule entry consists of criteria that incoming or outgoing traffic is compared
against, and the action to take on traffic matching the criteria. If traffic does not
match the criteria of any of the entries in this box, it is dropped.
First column
This column may contain icons that indicate the status of a rule.
Name/Number
The name or the number of the access rule.
The numbers 1 through 99 are used to identify standard access lists. The numbers
100 through 199 are used to identify extended access lists. Name s, which can
contain alphabetic characters, allow you to extend the range of standard access
lists beyond 99, and extended access lists beyond 199.
If the rule is read only, the read-only icon will appear in this column.