ACL
IP Based ACL
SPS208G/SPS224G4/SPS2024 Service Provider Switches User Guide 100
6
-
Deny
— Drops packets which meet the ACL criteria.
-
Shutdown
— Drops packet that meet the ACL criteria, and disables the
port to which the packet was addressed.
• Protocol — Enables creating an ACE based on a specific protocol. The
possible field values are:
-
ICMP
—
Internet Control Message Protoco
l (ICMP). The ICMP allows the
gateway or destination host to communicate with the source host. For
example, to report a processing error.
-
IGMP
—
Internet Group Management Protocol
(IGMP). Allows hosts to
notify their local switch or router that they want to receive transmissions
assigned to a specific Multicast group.
-
IP — IP in IP (Encapsulation) Protocol
(IP). A method by which an IP
datagram may be encapsulated (carried as payload) within an IP
datagram, and can transmit data using a tunneling method.
-
TCP
—
Transmission Control Protocol
(TCP). Enables two hosts to
communicate and exchange data streams. TCP guarantees that packets
are transmitted and received in the order they are sent.
-
EGP
—
Exterior Gateway Protocol
(EGP). Permits exchanging routing
information between two neighboring gateway hosts in an autonomous
systems network.
-
IGP
—
Interior Gateway Protocol
(IGP). Allows for routing information
exchange between gateways in an autonomous network.
-
UDP
—
User Datagram Protocol
(UDP). Communication protocol that
transmits packets but does not guarantee their delivery.
-
HMP
—
Host Mapping Protocol
(HMP). Collects network information
from various networks hosts. HMP monitors hosts spread over the
Internet as well as hosts in a single network.
-
RDP
—
Remote Desktop Protocol
(RDP). Allows clients to communicate
with the Terminal Server over the network.
-
IDPR
— Matches the packet to the
Inter-Domain Policy Routing
(IDPR)
Protocol. Routing protocol used to construct and maintain routes
between source and destination administrative domains.
-
IDRP
— Matches the packet to the
Inter-Domain Routing Protocol
(IDRP).
Specifies how routers in different domains within an OSI environment
communicate with each other.