i
Table of Contents
1 ACL Configuration·····································································································································1-1
ACL Overview ·········································································································································1-1
ACL Matching Order························································································································1-1
Ways to Apply an ACL on a Switch·································································································1-2
Types of ACLs Supported by S3100 Series Ethernet Switches ·····················································1-3
ACL Configuration···································································································································1-3
Configuring Time Range··················································································································1-3
Configuring Basic ACL ····················································································································1-5
Configuring Advanced ACL·············································································································1-6
Configuring Layer 2 ACL·················································································································1-7
Configuring an IPv6 ACL·················································································································1-8
ACL Assignment ···································································································································1-11
Assigning an ACL Globally············································································································1-12
Assigning an ACL to a VLAN ········································································································1-12
Assigning an ACL to a Port Group ································································································1-13
Assigning an ACL to a Port ···········································································································1-13
Displaying ACL Configuration···············································································································1-14
Example for Upper-Layer Software Referencing ACLs ········································································1-15
Example for Controlling Telnet Login Users by Source IP····························································1-15
Example for Controlling Web Login Users by Source IP·······························································1-15
Example for Applying ACLs to Hardware······························································································1-16
Basic ACL Configuration Example ································································································1-16
Advanced ACL Configuration Example·························································································1-17
Layer 2 ACL Configuration Example·····························································································1-17
IPv6 ACL Configuration Example··································································································1-18
Example for Applying an ACL to a Port Group··············································································1-19