9-10
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 9 Managing Policy Elements
Managing Policy Conditions
Step 5 Click Submit to save the changes.
Related Topics
• Managing Network Conditions, page 9-6
• Importing Network Conditions, page 9-8
• Creating, Duplicating, and Editing Device Filters, page 9-12
• Creating, Duplicating, and Editing Device Port Filters, page 9-14
Defining IP Address-Based End Station Filters
You can create, duplicate, and edit the IP addresses of end stations that you want to permit or deny access
to. To do this:
Step 1 From the IP Address tab, do one of the following:
• Click Create.
• Check the check box next to the IP-based end station filter that you want to duplicate, then click
Duplicate.
• Check the check box next to the IP-based end station filter that you want to edit, then click Edit.
A dialog box appears.
Step 2 Choose either of the following:
• Single IP Address—If you choose this option, you must enter a valid IPv4 address of the format
x.x.x.x, where x can be any number from 0 to 255.
• IP Range(s)—If you choose this option, you must enter a valid IPv4 address and subnet mask to filter
a range of IP addresses. By default, the subnet mask value is 32.
Step 3 Click OK.
Related Topics
• Managing Network Conditions, page 9-6
• Creating, Duplicating, and Editing End Station Filters, page 9-9
• Defining MAC Address-Based End Station Filters, page 9-11
• Defining CLI or DNIS-Based End Station Filters, page 9-11