44 Access Control List Configuration
44.1 Overview
As part of the GSN security solution, DGS-3610 series uses access control lists to provide a
powerful data flow filtering function. At present, DGS-3610 series support the following
access lists:
Standard IP access control list
Extended IP access control list
MAC access control list
MAC extended access control list
Expert extended access control list
IPV6 extended access control list
Depending on the conditions of networks, you can choose different access control lists to
control data flows.
44.1.1 Access Control List Introduction
ACLs is the short for Access Control Lists, or Access Lists. It is also popularly called firewall,
or packet filtering in some documentation. ACLs controls the data packets on the network
device interface by defining some rules:Allow or deny. According to usage ranges, they can
be divided into ACLs and QoS ACLs.
By filtering the data flows, you can restrict the communication data types in the network and
restrict the users of the network and the device they can use. When data flows pass the
device, ACLs classify and filter them, that is, check the data flows inputted from the specified
interface and check whether to permit or deny them according to the matching conditions.
Generally, the security ACLs is used to control specific data flows allowed to pass through
the network device. The QoS policy performs priority classification and processing for the
dataflow.
ACLs consist of a series of entries, known as Access Control Entry (ACE). Each entry
specifies its matching condition and behavior.
Access list rules can be about the source addresses, destination addresses, upper layer
protocols, time-ranges or other information of data flows.
To Next Page
Loading...
Need help?
General