178
•
N
ote—You must specify the IP protocol for the ACE before you can enter th
e
source and/or destination port.
•
Type of Services—The service type of the IP packet.
o
Any—Any service type
o
DSCP to Match—Differentiated Serves Code Point (DSCP) to match
o
IP Precedence—IP precedence is a model of TOS (type of service) that th
e
network uses to help provide the appropriate QoS commitments. This
model uses the 3 most significant bits of the service type byte in the
IP
header, as described in RFC 791 and RFC 1349.
5. Click Apply. The IPv6-Based ACE is saved to the Running Configuration file.
ACL Binding
W
hen an ACL is bound to an interface (port, LAG or VLAN), its ACE rules are applied to packets
arriving at that interface. Packets that do not match any of the ACEs in the ACL are matched to a
default rule, whose action is to drop unmatched packets.
Multiple interfaces can be bound to the same ACL.
After an ACL is bound to an interface, it cannot be edited, modified, or deleted until it is removed
from all the ports to which it is bound or in use.
To bind an ACL to a port or LAG:
1. Click Configuration > Access Control List > ACL Binding (Port).
2. Select an interface type Ports/LAGs (Port or LAG).
3. Click Search.
For each type of interface selected, all interfaces of that type are displayed with a list o
f
t
heir current ACLs.
To Next Page
Loading...
