57
Access Control List Configuration Parameters:
Indicates the ingress port of the ACE. Possible values are:
Any: The ACE will match any ingress port.
Policy: The ACE will match ingress ports with a specific policy.
Port: The ACE will match a specific ingress port.
Indicates the policy number and bitmask of the ACE.
Indicates the frame type of the ACE. Possible values are:
Any: The ACE will match any frame type.
EType: The ACE will match Ethernet Type frames. Note that an Ethernet Type based ACE will
not get matched by IP and ARP frames.
ARP: The ACE will match ARP/RARP frames.
IPv4: The ACE will match all IPv4 frames.
IPv4/ICMP: The ACE will match IPv4 frames with ICMP protocol.
IPv4/UDP: The ACE will match IPv4 frames with UDP protocol.
IPv4/TCP: The ACE will match IPv4 frames with TCP protocol.
IPv4/Other: The ACE will match IPv4 frames, which are not ICMP/UDP/TCP.
IPv6: The ACE will match all IPv6 standard frames.
Indicates the forwarding action of the ACE.
Permit: Frames matching the ACE may be forwarded and learned.
Deny: Frames matching the ACE are dropped.
Filter: Frames matching the ACE are filtered.
Indicates the rate limiter number of the ACE. The allowed range is 1 to 16. When Disabled is
displayed, the rate limiter operation is disabled.
Indicates the port copy operation of the ACE. Frames matching the ACE are copied to the
port number. The allowed values are Disabled or a specific port number. When Disabled is
displayed, the port copy operation is disabled.
Indicates the logging operation of the ACE. Possible values are:
Enabled: Frames matching the ACE are stored in the System Log.
Disabled: Frames matching the ACE are not logged.
Indicates the port shut down operation of the ACE. Possible values are:
Enabled: If a frame matches the ACE, the ingress port will be disabled.
Disabled: Port shut down is disabled for the ACE.
The counter indicates the number of times the ACE was hit by a frame. U s i n g t h e
modification buttons you can modify each ACE (ACCESS Control Entry) in the table using the
following buttons.
: Inserts a new ACE before the current row. The second identical icon adds a new entry at
the bottom of the ACE Listing.
: Moves the ACE up the list.
: Moves the ACE down the list.
(Only displayed when the frame type is Ethernet Type or ARP.) Specify the source MAC filter for
this ACE. Any: No SMAC filter is specified. (SMAC filter status is "don't-care"). Specific: If you
want to filter a specific source MAC address with this ACE, choose this value. A field for
entering an SMAC value appears.
When "Specific" is selected for the SMAC filter, you can enter a specific source MAC
address. The legal format is "xx-xx-xx-xx-xx-xx" or "xx.xx.xx.xx.xx.xx" or "xxxxxxxxxxxx" (x
is a hexadecimal digit). A frame that hits this ACE matches this SMAC value.
To Next Page
Loading...