Manage Device Security
268
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP
8. Configure the following match criteria for the rule:
• Sequence Number. Enter a number in the range from 1 to 2147483647 that is used to
identify the rule.
An extended IP ACL can contain up to 50 rules.
• Action. Select the
ACL forwarding action, which is one of the following:
- Permit. Forward packets that meet the
ACL criteria.
Egress Queue. If the selection from the Action menu is Permit, select the
hardware egress queue identifier that is used to handle all packets matching this
IP
ACL rule. The range of queue IDs is 0 to 7.
- Deny. Drop packets that meet the
ACL criteria.
Logging. If the selection form the Action menu is Deny, you can enable logging
for the
ACL by selecting the Enable radio button. (Logging is subject to resource
availability in the device.)
• Interface. For a Permit action, use either a mirror interface or a redirect interface:
- Select the Mirror radio button and use the menu to specify the egress interface to
which the matching traf
fic stream is copied, in addition to being forwarded
normally by the device.
- Select the Redirect radio button and use the menu to specify the egress interface
to which the matching traf
fic stream is forced, bypassing any forwarding decision
normally performed by the device.
• Match Every. Select one of the radio buttons to specify whether all packets must
match the selected IP
ACL rule:
- False. Not all packets need to match the selected IP
ACL rule. You can configure
other match criteria on the page.
To Next Page
Loading...
