B.0 Predefined Access Control Lists

There are two ways you can use the predefined Access Control Lists:

When you add an Access Control List, you can select the predefined ACL from the list of shared components. In this case, you would use the Component Name referenced in the table below.
When you edit an existing Access Control List, you can add the Macro Name to the IP/MAC Address field.

For more information about using the predefined Access Control Lists, see Access Control Lists.

Component Name	Macro Name	Description
ARP	[Arp]	Allows ARP (Address Resolution Protocol) packets. The term Address Resolution refers to the process of finding an address of a computer in a network. The address is resolved by using a protocol in which a piece of information is sent by a client process executing on the local computer to a server process executing on a remote computer. The information received by the server allows the server to uniquely identify the network system for which the address was required and provide the required address. The address resolution procedure is completed when the client receives a response from the server containing the required address.
ICMP	[Icmp]	Allows ICMP (Internet Control Message Protocol) packets. ICMPs are used by routers, intermediary devices, or hosts to communicate updates or error information to other routers, intermediary devices, or hosts. ICMP messages are sent in several situations: for example, when a datagram cannot reach its destination, when the gateway does not have the buffering capacity to forward a datagram, and when the gateway can direct the host to send traffic on a shorter route.
IP Multicast	[IpMulticast]	Allows IP multicast packets. Multicast is a bandwidth-conserving technology that reduces traffic by simultaneously delivering a single stream of information to thousands of corporate recipients and homes. Applications that take advantage of multicast include videoconferencing, corporate communications, distance learning, and distribution of software, stock quotes, and news. Multicast packets can be distributed by using either IP or Ethernet addresses.
Ethernet Multicast	[EthernetMulticast]	Allows Ethernet multicast packets.
IP Subnet Broadcast	[IpSubnetBrdcast]	Allows subnet broadcast packets. Subnet broadcasts are used to send packets to all hosts of a subnetted, supernetted, or otherwise nonclassful network. All hosts of a nonclassful network listen for and process packets addressed to the subnet broadcast address.
Snap Server	[Snap]	Allows Snap encoded packets.
Logical Link Layer Control	[LLC]	Allows LLC encoded packets.
802.1x	[Allow8021X]	Allows 802.1x packets. To overcome deficiencies in Wired Equivalent Privacy (WEP) keys, Microsoft and other companies are utilizing 802.1x as an alternative authentication method. 802.1x is a port-based network access control that uses the Extensible Authentication Protocol (EAP) or certificates. Currently, most major wireless card vendors and many access point vendors support 802.1x. This setting also allows Light Extensible Authentication Protocol (LEAP) and WiFi Protected Access (WPA) authentication packets.
Default Gateway	[Gateway]	Represents the current IP configuration default gateway address. When this value is entered, the Security Client allows all network traffic from the current IP configuration default gateway as a trusted ACL.
All Gateways	[GatewayAll]	Same as [Gateway] but for all defined gateways.
Default Wins	[Wins]	Represents the current client IP configuration default WINS server address. When this value is entered, the Security Client allows all network traffic from the current IP configuration default WINS server as a trusted ACL.
All Wins	[WinsAll]	Same as [Wins] but for all defined WINS servers.
Default Dns	[Dns]	Represents the current client IP configuration default DNS server address. When this value is entered, the Security Client allows all network traffic from the current IP configuration default DNS server as a trusted ACL.
All Dns	[DnsAll]	Same as [Dns] but for all defined DNS servers.
Default Dhcp	[Dhcp]	Represents current client IP configuration Default DHCP server address. When this value is entered, the Security Client allows all network traffic from the current IP configuration default DHCP server as a trusted ACL.
All Dhcp	[DhcpAll]	Same as [Dhcp] but for all defined DHCP servers.