Configure address masks in ACLs on S series switches

For S series switches (except S1700 switches):
An address mask must be specified when a source IP address or destination IP address is configured in an ACL rule. The address mask is the wildcard.
In a binary wildcard, the value 0 indicates that this bit needs to be matched and the value 1 indicates that this bit does not need to be matched. 0s and 1s in a wildcard can be discontinuous.
For example, the IP address 192.168.1.169 and the wildcard 0.0.0.172 represent address 192.168.1.x0x0xx01. x can be 0 or 1.

Scroll to top