Dell X1000 Series - Page 268

268 Network Administration: Security
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Dell Astute\User
Guide\Dell_Astute_Network_Admin_Security.fm
DELL CONFIDENTIAL – PRELIMINARY 8/9/16 - FOR PROOF ONLY
– IGMP — IGMP packets can be filtered by IGMP message type. This
field is available only when IGMP is selected in the
Protocol field. The
following options are available:
•
Select from List — Select an IGMP message type from the list.
•
IGMP Type — Enter the IGMP message type.
•
Any — Check to use all IGMP message types.
–
Classification — Select one of the following matching options:
•
Match DSCP(0-63) — Matches the packet DSCP value to the
ACL.
•
Match IP Precedence(0-7) — Check to enable matching
IP-precedence with the packet IP-precedence value. IP-precedence
enables marking frames that exceed the CIR threshold. In a
congested network, frames containing a higher DP value are
discarded before frames with a lower DP value. If this field is
checked, enter a value to be matched.
–
Time Range Name — Check to associate a time range with the ACE.
Select one of the time ranges defined in the Time Range
Configuration page.
–
Action — Select the ACL forwarding action. The following options
are available:
•
Permit — Forward packets which meet the ACL criteria.
•
Deny — Drop packets which meet the ACL criteria.
•
Shutdown — Drop packet that meet the ACL criteria, and disable
the port to which the packet was addressed.
–
Logging of Dropped Packets — Check to activate logging of dropped
packets.
IPv6-Based ACLs
The IPv6 Based ACL Page displays and enables the creation of IPv6 ACLs,
which check pure IPv6-based traffic. IPv6 ACLs do not check IPv6-over-IPv4
or ARP packets.