Ip Access Control List (Acl) Commands - NETGEAR ProSafe GSM7248 User Manual

User Manual for the NETGEAR 7200 Series Layer 2 Managed Switch Software Version 4
Rule Number
Action
Source MAC Address
Source MAC Mask
Destination MAC Address
Destination MAC Mask
Ethertype
VLAN ID
COS
Assign Queue
Redirect Interface

IP Access Control List (ACL) Commands

IP Access Control Lists (ACLs) ensure that only authorized users have access to specific resources
while blocking off any unwarranted attempts to reach network resources.
• IP ACL configuration for IP packet fragments is not supported.
• The maximum number of ACLs of any type that can be created is 100.
• The maximum number of rules per IP ACL translates into the number of hardware classifier
entries used when an IP ACL is attached to an interface. Increasing these values in the
software increases the RAM and NVSTORE usage.
• ACLs are configured separately for Layer 2 and Layer 3/Layer 4. Some types of hardware do
not allow both types of ACLs to be applied to the same interface.
• Wildcard masking for ACLs operates differently from a subnet mask. A wildcard mask is in
essence the inverse of a subnet mask. With a subnet mask, the mask has ones (1's) in the bit
positions that are used for the network address, and has zeros (0's) for the bit positions that are
not used. In contrast, a wildcard mask has (0's) in a bit position that must be checked. A '1' in
a bit position of the ACL mask indicates the corresponding bit can be ignored.
Quality of Service (QoS) Commands
The ordered rule number identifier defined within the MAC ACL.
Displays the action associated with each rule. The possible values are
Permit or Deny.
Displays the source MAC address for this rule.
Displays the source MAC mask for this rule.
Displays the destination MAC address for this rule.
Displays the destination MAC mask for this rule.
Displays the Ethertype keyword or custom value for this rule.
Displays the VLAN identifier value or range for this rule.
Displays the COS (802.1p) value for this rule.
Displays the queue identifier to which packets matching this rule are
assigned.
Displays the slot/port to which packets matching this rule are for-
warded.
202-10102-01, May 2005
10-5