Chapter24 ACL Editor
Rules Windows
24-18
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
Destination
For extended rules, the destination IP address criteria that the traffic must match.
The address may be for a network, or a specific host. This column may contain
the following:
•An IP address and wildcard mask. The IP address specifies a network, and the
wildcard mask specifies how much of the rule’s IP address the IP address in
the packet must match.
•The keyword any. Any indicates that the source IP address can be any IP
address
•A host name.
Service
For extended rules, the service specifies the type of traffic that packets matching
the rule must contain. This is shown by displaying the service, such as echo-reply,
followed by the protocol, such as ICMP. A rule permitting or denying multiple
services between the same endpoints must contain an entry for each service.