230
These parameters are displayed:
◆ User – Indicates the ACL user (see "Configuring User Privilege Levels" on page 51 for a
list of software modules).
◆ Ingress Port – Indicates the ingress port to which the ACE applies. Possible values are:
■ Any: The ACE will match any ingress port.
■ Policy: The ACE will match ingress ports with a specific policy.
■ Port: The ACE will match a specific ingress port.
◆ Frame Type – Indicates the frame type to which the ACE applies.
Possible values are:
■ Any: The ACE will match any frame type.
■ EType: The ACE will match Ethernet Type frames. Note that an Ethernet Type based
ACE will not get matched by IP and ARP frames.
■ ARP: ACE will match ARP/RARP frames.
■ IPv4: ACE will match all IPv4 frames.
■ IPv4/ICMP: ACE will match IPv4 frames with ICMP protocol.
■ IPv4/UDP: ACE will match IPv4 frames with UDP protocol.
■ IPv4/TCP: ACE will match IPv4 frames with TCP protocol.
■ IPv4/Other: ACE will match IPv4 frames, which are not ICMP/UDP or TCP.
◆ Action – Indicates the forwarding action of the ACE:
■ Permit: Frames matching the ACE may be forwarded and learned.
■ Deny: Frames matching the ACE are dropped.
◆ Rate Limiter – Indicates the rate limiter number implemented by the ACE. The allowed
range is 1 to 15.
◆ Port Copy – Indicates the port copy operation implemented by the ACE. Frames matching
the ACE are re-directed to the listed port.
◆ Mirror – Indicates the port mirror operation implemented by the ACL.
Frames matching the ACE are mirrored to the listed port. (See "Configuring Port Mirroring"
on page 198)
◆ CPU – Forwards packet that matched the specific ACE to the CPU.
◆ CPU Once – Forwards first packet that matched the specific ACE to the CPU.
◆ Counter – The number of times the ACE was matched by a frame.
◆ Conflict – This field shows “Yes” if a specific ACE is not applied due to hardware
limitations.
To Next Page
Loading...
