Filter
Top Products
9-15
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 9 Managing Policy Elements
Managing Policy Conditions
• Check the check box next to the device port filter that you want to edit, then click Edit.
• Click Export to save a list of device port filters in a .csv file. For more information, see Exporting
Network Conditions, page 9-9.
• Click Replace from File to perform a bulk import of device port filters from a .csv import file. For
more information, see Importing Network Conditions, page 9-8.
Step 3 Enter the values for the following fields:
• Name—Name of the device port filter.
• Description—A description of the device port filter.
Step 4 Edit the fields in any or all of the following tabs:
• IP Address—See Defining IP Address-Based Device Port Filters, page 9-15 for a description of the
fields in this tab.
• Device Name—See Defining NDG-Based Device Port Filters, page 9-17 for a description of the
fields in this tab.
• Network Device Group—See Defining NDG-Based Device Port Filters, page 9-17 for a description
of the fields in this tab.
Note To configure a filter, at a minimum, you must enter filter criteria in at least one of the three tabs.
Step 5 Click Submit to save the changes.
Related Topics
• Managing Network Conditions, page 9-6
• Importing Network Conditions, page 9-8
• Creating, Duplicating, and Editing End Station Filters, page 9-9
• Creating, Duplicating, and Editing Device Filters, page 9-12
Defining IP Address-Based Device Port Filters
You can create, duplicate, and edit the IP addresses of the network device ports that you want to permit
or deny access to. To do this:
Step 1 From the IP Address tab, do one of the following:
• Click Create.
• Check the check box next to the IP-based device port filter that you want to duplicate, then click
Duplicate.
• Check the check box next to the IP-based device port filter that you want to edit, then click Edit.
A dialog box appears.
Step 2 Choose either of the following:
• Single IP Address—If you choose this option, you must enter a valid IPv4 address of the format
x.x.x.x, where x can be any number from 0 to 255.
• IP Range(s)—If you choose this option, you must enter a valid IPv4 address and subnet mask to filter
a range of IP addresses. By default, the subnet mask value is 32.