49
Chapter 5: Using the Web-based Utility for Configuration
ACL Tab - IP Based ACL
WebView Switches
Action. Indicates the action assigned to the packet matching the ACL. Packets are forwarded or dropped. In
addition, the port can be shut down, a trap can be sent to the network administrator, or a packet assigned rate
limiting restrictions for forwarding. The options are as follows:
• Permit. Forwards packets which meet the ACL criteria.
• Deny. Drops packets which meet the ACL criteria.
• Shutdown. Drops packet that meets the ACL criteria, and disables the port to which the packet was
addressed. Ports are reactivated from the Port Management screen.
Protocol. Creates an ACE (Access Control Event) based on a specific protocol.
• Select from List. Selects from a protocols list on which ACE can be based. The possible field values are:
• Any. Matches the protocol to any protocol.
• EIGRP. Indicates that the Enhanced Interior Gateway Routing Protocol (EIGRP) is used to classify network
flows.
• ICMP. Indicates that the Internet Control Message Protocol (ICMP) is used to classify network flows.
• IGMP. Indicates that the Internet Group Management Protocol (IGMP) is used to classify network flows.
• TCP. Indicates that the Transmission Control Protocol is used to classify network flows.
• OSPF. Matches the packet to the Open Shortest Path First (OSPF) protocol.
• UDP. Indicates that the User Datagram Protocol is used to classify network flows.
• Protocol ID To Match. Adds user-defined protocols to which packets are matched to the ACE. Each protocol
has a specific protocol number which is unique. The possible field range is 0-255.
TCP Flags. Filters packets by TCP flag. Filtered packets are either forwarded or dropped. Filtering packets by TCP
flags increases packet control, which increases network security. The values that can be assigned are:
• Set. Enables filtering packets by selected flags.
• Unset. Disables filtering packets by selected flags.
• Don’t care. Indicates that selected packets do not influence the packet filtering process.
The TCP Flags that can be selected are:
Figure 5-26: ACL - IP Based ACL
To Next Page
Loading...
Need help?
General
