Configuring the ECN330-switch
1591553-KDU 137 365 Uen D 2006-06-16
The order in which active ACLs are checked is as follows:
1. MAC ACLs and IP ACLs bound to ports are checked first.
A User-defined rules in the Egress MAC ACL for egress ports.
B User-defined rules in the Egress IP ACL for egress ports.
C User-defined rules in the Ingress MAC ACL for ingress ports.
D User-defined rules in the Ingress IP ACL for ingress ports.
E Explicit default rule (permit any any) in the ingress IP ACL for ingress
ports.
F Explicit default rule (permit any any) in the ingress MAC ACL for ingress
ports.
G If no explicit rule is matched, the implicit default is permit all.
2. VLAN ACLs are then checked.
6.6.1.1 Setting the ACL Name and Type
Use the ACL Configuration page to designate the name and type of an ACL.
Command Attributes
• Name – Name of the ACL. (Maximum length: 16 characters)
• Type – There are three filtering modes:
• Standard: IP ACL mode that filters packets based on the source IP
address.
• Extended: IP ACL mode that filters packets based on source or
destination IP address, as well as protocol type and protocol port
number. If the “TCP” protocol is specified, then packets can also be
filtered based on the TCP control code.
• MAC: MAC ACL mode that filters packets based on the source or
destination MAC address and the Ethernet frame type (RFC 1060).
To Next Page
Loading...
