Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

7-15
Access Control Lists (ACLs)
Configuring ACLs
Figure 7-4. Add Rule Screen for Standard IP ACLs
3. In the Precedence field, specify the precedence for the rule, from 1
through 5,000. The Wireless Edge Services xl Module processes rules in
ascending order (starting at 1, moving to 2, and so on).
As you assign precedence values to rules for a given ACL, consider using
nonconsecutive numbers (for example, 10, 20, 30, and so on), in case you
need to insert new rules “between” existing rules later.
4. In the Operation field, use the drop-down menu to select the operation
(deny, permit, or mark) for the rule.
Note The mark operation only takes effect if you apply this ACL to a physical
interface.
5. Optionally, check the Logging box to allow the module to keep track of
the number of packets matched to this rule.
6. If you selected the mark operation in step 4, under Attribute to mark, select
one of the following:
• 802.1p—Then specify the traffic service class value, from 0 through 7.
• TOS—Then specify the value for the TOS octet, from 0 through 255.
Standard DSCP values are from 0 through 63.
Remember that higher values typically mark traffic for better QoS.