1-3
z Filtering the packets to be forwarded
Being referenced by upper-level software
ACLs can also be used to filter and classify the packets to be processed by software. In this
case, the rules in an ACL can be matched in one of the following two ways:
z config, where rules in an ACL are matched in the order defined by the user.
z auto, where the rules in an ACL are matched in the order determined by the system,
namely the “depth-first” order (Layer 2 ACLs and user-defined ACLs do not support this
feature).
When applying an ACL in this way, you can specify the order in which the rules in the ACL
are matched. The match order cannot be modified once it is determined, unless you delete
all the rules in the ACL and define the match order.
An ACL can be referenced by upper-layer software:
z Referenced by routing policies
z Used to control Telnet, SNMP and Web login users
z When an ACL is directly applied to hardware for packet filtering, the switch will permit
packets if the packets do not match the ACL.
z When an ACL is referenced by upper-layer software to control Telnet, SNMP and Web
login users, the switch will deny packets if the packets do not match the ACL.
Types of ACLs Supported by Switch 5500-EI Series
The following types of ACLs are supported by Switch 5500-EI series:
z Basic ACL
z Advanced ACL
z Layer 2 ACL
z User-defined ACL
In addition, ACLs defined on Switch 5500-EI series can be applied to hardware directly or
referenced by upper-layer software for packet filtering.
ACL Configuration Task List
Complete the following tasks to configure ACL:
Task Remarks
Configuring Time Range Optional
Configuring Basic ACL Required
To Next Page
Loading...
