Acl Interface Configuration - D-Link DWS-4026 User Manual

Software User Manual
12/10/09
Field
Ethertype User Value
Source MAC Address
Source MAC Mask
VLAN
Adding a New Rule to a MAC-based ACL
Once you configure a MAC ACL, you can add rules to the ACL.
1 Open the MAC ACL Rule Configuration page.
2 If more than one MAC ACL is configured on the system, select the desired ACL from the MAC ACL menu.
3 From the Rule menu, select Create New Rule.
4 Enter a new ID number for the rule.
5 Configure the remaining rule criteria as needed.
6 Click Submit.
The new rule is assigned to the specified MAC-based ACL.
Removing a Rule From a MAC-based ACL
1 From the MAC ACL Rule Configuration page, select an ACL from the MAC ACL field.
2 Select a rule from the Rule menu .
3 Click Delete.
The rule is removed from the MAC-based ACL, and the device is updated.
ACL I C
NTERFACE ONFIGURATION
When an ACL is bound to an interface, all the rules that have been defined are applied to the selected interface. Use the
ACL Interface Configuration page to assign ACLs and Interfaces and prioritize the ACLs that are bound to each interface.
To display the ACL Interface Configuration page, click LAN > QoS > Access Control Lists > Interface Configuration in
the navigation menu.
Document 34CSFP6XXUWS-SWUM100-D7
Table 221: MAC ACL Rule Configuration Fields (Cont.)
Description
This field only appears if you select User Value from the EtherType dropdown list. The
value you enter specifies a customized Ethertype to compare against an Ethernet
frame. The valid range of values is (0x0600 to 0xFFFF).
Requires a packet's source port MAC address to match the address listed here. Click
Configure, and then enter a MAC address in the appropriate field. The valid format is
xx:xx:xx:xx:xx:xx.
If desired, enter the MAC mask for the source MAC address to match. Use F's and
zeros in the MAC mask, which is in a wildcard format. An F means that the bit is not
checked, and a zero in a bit position means that the data must equal the value given
for that bit. The valid format is xx:xx:xx:xx:xx:xx. Click Submit or Cancel to return to
the Rule Configuration page.
Requires a packet's VLAN ID to match the ID listed here. Click Configure, and then
enter the VLAN ID to apply this criteria. The valid range is 1–3965. Either VLAN Range
or VLAN can be configured. Click Submit or Cancel to return to the Rule Configuration
page.
D-Link Unified Access System
Configuring Access Control Lists Page 355