Hirschmann PowerMICE User Manual

Assistance in the Protection from Un-
authorized Access
114
6.8 Access Control Lists (ACL)
UM Basic Configuration L3P
Release 7.1 12/2011
6.8.4 Configuring IP ACLs
Example: Extended ACL
B and C are not allowed to communicate with A.
enable Switch to the privileged EXEC mode.
configure Switch to the Configuration mode.
access-list 100 deny ip
10.0.1.11 0.0.0.0
10.0.1.158 0.0.0.0
access-list 100 permit
ip any any
Create the extended ACL 100 with the first rule.
This denies data traffic from IP source address
10.0.1.11 to IP destination address 10.0.1.158.
Add another rule to the ACL 100. This permits data
traffic from any IP source address to any IP
destination address.
access-list 110 deny ip
10.0.1.13 0.0.0.0
10.0.1.158 0.0.0.0
access-list 110 permit
ip any any
Create the extended ACL 110 with the first rule.
This denies data traffic from IP source address
10.0.1.13 to IP destination address 10.0.1.158.
Add another rule to the ACL 110. This permits data
traffic from any IP source address to any IP
destination address.
exit Switch to the privileged EXEC mode.
show ip access-lists 100 Displays the rules of ACL 100.
CB
DA
IP: 10.0.1.13/24
IP: 10.0.1.158/24
IP: 10.0.1.11/24
IP: 10.0.1.159/24
Interface: 3.1
Interface: 2.1Interface: 1.3
Interface: 2.3

Hirschmann PowerMICE Specifications

General

Brand	Hirschmann
Model	PowerMICE
Category	Network Router
Language	English

Summary

Access to User Interfaces

Command Line Interface (CLI)

Allows device configuration via local/remote connection, supporting script compatibility for batch operations.

Web-based Interface

Graphical interface for device operation via web browser, using SNMP for communication.

Entering IP Parameters

IP Parameter Basics

Explains IP address classes, network addresses, subnet masks, and CIDR notation for IP addressing.

Entering IP Parameters via CLI

Details the process of entering IP parameters using the Command Line Interface via V.24 connection.

Entering IP Parameters via HiDiscovery

Describes using the HiDiscovery protocol to assign IP parameters to the device via Ethernet.

System Configuration via BOOTP

Describes configuring the device using BOOTP, requiring a BOOTP server for configuration data.

System Configuration via DHCP

Explains DHCP for device configuration, allowing IP address allocation via MAC address or system name.

Loading and Saving Settings

Loading Settings

Describes loading configuration data from various sources into temporary memory for device operation.

Saving Settings

Explains saving current configuration data to local non-volatile memory or the AutoConfiguration Adapter (ACA).

Loading Software Updates

Loading Software Manually from ACA

Details manual loading of device software from the AutoConfiguration Adapter (ACA) into the device's local memory.

Loading Software from TFTP Server

Configuring the Ports

Configure Power over ETHERNET (PoE)

Protection from Unauthorized Access

Protecting the Device

SNMP Access Password

Restricted Management Access

Port Access Control

Port Authentication IEEE 802.1X

Access Control Lists (ACL)

Allows filtering, forwarding, redirecting, or prioritizing data packets using MAC-based and IP-based ACLs.

Synchronizing System Time in the Network

SNTP (Simple Network Time Protocol)

Precision Time Protocol (PTP)

Network Load Control

Direct Packet Distribution

Multicast Application

Rate Limiter

Limits traffic rate at ports to ensure reliable operation during high traffic periods and prevent overload.

QoS/Priority

Assigns priority to different traffic classes to prevent disruption of time-critical data traffic.

VLANs

Describes Virtual LANs (VLANs) for network load limiting, flexibility, and clarity, based on IEEE 802.1Q standard.

Operation Diagnosis

Sending Traps

Monitoring the Device Status

Topology Discovery

Detecting IP Address Conflicts

Detecting Loops

EtherNet/IP

Integration into a Control System

Guides configuring the switch for automation applications, checking IGMP Snooping and EtherNet/IP activation, and downloading EDS files.

EtherNet/IP Parameters

Details EtherNet/IP parameters including Identity Object, TCP/IP Interface Object, Ethernet Link Object, and Switch Agent Object.

Setting up the Configuration Environment

Setting up a DHCP/BOOTP Server

Explains installing and configuring the haneWIN DHCP-Server for automatic device IP address assignment.

Setting up a DHCP Server with Option 82

TFTP Server for Software Updates

Describes setting up a TFTP server for performing software updates, including process and access rights.

Preparing Access via SSH

Guides on generating, installing, and enabling SSH access, including key generation and uploading.