Table of Contents
Advertisement
2
.
4
.
3
A
C
L
–
A
2
.
4
.
3
A
C
L
–
A
The section describes how to configure Access Control List rule. An Access Control List
(ACL) is a sequential list of permit or deny conditions that apply to IP addresses, MAC
addresses, or other more specific criteria. This switch tests ingress packets against the
conditions in an ACL one by one. A packet will be accepted as soon as it matches a permit
rule, or dropped as soon as it matches a deny rule. If no rules match, the frame is accepted.
Other actions can also be invoked when a matching packet is found, including rate limiting,
copying matching packets to another port or to the system log, or shutting down a port.
Function name:
ACL – Access Control List
Function description:
The function is used to show the Access Control List (ACL), which is made up of the
ACEs defined on this switch. Each row describes the ACE that is defined. The maximum
number of ACEs is 256 on each switch. Click on the lowest plus sign to add a new ACE to
the list. The reserved ACEs used for internal protocol, cannot be edited or deleted, the
order sequence cannot be changed an the priority is highest
Parameters description:
Ingress Port
Policy/Bitmask
Frame Type
166
c
c
e
s
s
C
o
n
t
r
o
l
L
i
c
c
e
s
s
C
o
n
t
r
o
l
L
i
Indicates the ingress port of the ACE. Possible values are:
Any: The ACE will match any ingress port.
Policy: The ACE will match ingress ports with a specific
policy.
Port: The ACE will match a specific ingress port.
Indicates the policy number and bitmask of the ACE.
Indicates the frame type of the ACE. Possible values are:
Any: The ACE will match any frame type.
EType: The ACE will match Ethernet Type frames. Note
that an Ethernet Type based ACE will not get matched by IP
and ARP frames.
ARP: The ACE will match ARP/RARP frames.
IPv4: The ACE will match all IPv4 frames.
s
t
s
t
VigorSwitch P2261 User's Guide
Hide quick links:
Advertisement
Table of Contents
