Mac Rules - NETGEAR GS110TP - ProSafe Gigabit Smart Switch Software Administration Manual

GS108T and GS110TP Smart Switch Software Administration Manual
Click Cancel to cancel the configuration on the screen and reset the data on the screen to
4.
the latest value of the switch.

MAC Rules

Use the MAC Rules page to define rules for MAC-based ACLs. The access list definition
includes rules that specify whether traffic matching the criteria is forwarded normally or
discarded. A default 'deny all' rule is the last rule of every list.
To display the MAC Rules page, click Security  ACL, then click the Basic  MAC Rules link.
To configure MAC ACL rules:
From the ACL Name field, specify the existing MAC ACL to which the rule will apply. To
1.
set up a new MAC ACL use the
To add a new rule, enter an ID for the rule, configure the following settings, and click Add.
2.
Action. Specify what action should be taken if a packet matches the rule's criteria:
•
Permit: Forwards packets that meet the ACL criteria.
•
Deny: Drops packets that meet the ACL criteria.
•
Assign Queue. Specifies the hardware egress queue identifier used to handle all
•
packets matching this ACL rule. Enter an identifying number from 0–3 in this field.
Match Every. Requires a packet to match the criteria of this ACL. Select True or
•
False from the drop down menu. Match Every is exclusive to the other filtering rules,
so if Match Every is True, the other rules on the screen are not available.
CoS. Requires a packet's class of service (CoS) to match the CoS value listed here.
•
Enter a CoS value between 0–7 to apply this criteria.
Destination MAC. Requires an Ethernet frame's destination port MAC address to
•
match the address listed here. Enter a MAC address in this field. The valid format is
xx:xx:xx:xx:xx:xx.
Destination MAC Mask. If desired, enter the MAC Mask associated with the
•
Destination MAC to match. The MAC address mask specifies which bits in the
destination MAC to compare against an Ethernet frame. Use Fs and zeros in the
MAC mask, which is in a wildcard format. An F means that the bit is not checked, and
a zero in a bit position means that the data must equal the value given for that bit. For
MAC ACL page.
Chapter 5: Managing Device Security | 183