This configuration element allows you to configure a fine grained security policy.

Parameters

local-ip-mask

Enter the local IP address mask

• Default: 255.255.255.255

remote-ip-mask

Enter the remote IP address mask.

• Default: 255.255.255.255

local-port-mask

Enter the local port mask for this security policy.

• Default: 0
• Values: Min: 0 / Max: 65535

remote-port-mask

Enter the remote port mask for this security policy.

• Default: 0
• Values: Min: 0 / Max: 65535

trans-protocol-mask

Enter the transport protocol mask for this security policy

• Default: 0
• Values: Min: 0 | Max: 65535

vlan-mask

Enter the VLAN ID mask

• Default: 0x000
• Values: 0x000 (disabled)-0xFFF

Path

outbound-sa-fine-grained-mask is a subelement under the ipsec>security-policy element. The full path from the topmost ACLI prompt is: configure-terminal > security > ipsec > security-policy > outbound-sa-fine-grained-mask.