Chapter 9 Managing Policy Elements

Managing Policy Conditions

Step 5 Click Submit to save the changes.

Related Topics

Managing Network Conditions, page 9-6

Importing Network Conditions, page 9-8

Creating, Duplicating, and Editing Device Filters, page 9-12

Creating, Duplicating, and Editing Device Port Filters, page 9-14

Defining IP Address-Based End Station Filters

You can create, duplicate, and edit the IP addresses of end stations that you want to permit or deny access to. To do this:

Step 1 From the IP Address tab, do one of the following:

Click Create.

Check the check box next to the IP-based end station filter that you want to duplicate, then click Duplicate.

Check the check box next to the IP-based end station filter that you want to edit, then click Edit. A dialog box appears.

Step 2 Choose either of the following:

Single IP Address—If you choose this option, you must enter a valid IPv4 address of the format x.x.x.x, where x can be any number from 0 to 255.

IP Range(s)—If you choose this option, you must enter a valid IPv4 address and subnet mask to filter a range of IP addresses. By default, the subnet mask value is 32.

Step 3 Click OK.

Related Topics

Managing Network Conditions, page 9-6

Creating, Duplicating, and Editing End Station Filters, page 9-9

Defining MAC Address-Based End Station Filters, page 9-11

Defining CLI or DNIS-Based End Station Filters, page 9-11

 

User Guide for Cisco Secure Access Control System 5.3

9-10

OL-24201-01

Page 240
Image 240
Cisco Systems OL-24201-01 manual Related Topics, Defining IP Address-Based End Station Filters