NETGEAR GS716T User Manual

282
GS716T and GS724T Gigabit Smart Switches
Access Control Lists (ACLs)
ACLs ensure that only authorized users have access to specific resources while blocking off
any unwarranted attempts to reach network resources.
ACLs are used to provide traffic flow control, restrict contents of routing updates, decide
which types of traffic are forwarded or blocked, and provide security for the network. ACLs
are normally used in firewall routers that are positioned between the internal network and an
external network, such as the Internet. They can also be used on a router positioned between
two parts of the network to control the traffic entering or exiting a specific part of the internal
network. The added packet processing required by the ACL feature does not affect switch
performance. That is, ACL processing occurs at wire speed.
Access lists are a sequential collection of permit and deny conditions. This collection of
conditions, known as the filtering criteria, is applied to each packet that is processed by the
switch or the router. The forwarding or dropping of a packet is based on whether or not the
packet matches the specified criteria.
Traffic filtering requires the following two basic steps:
1. Create an access list definition.
The access list definition includes rules that specify whether traffic matching the criteria is
forwarded normally or discarded. Additionally, you can assign traffic that matches the
criteria to a particular queue or redirect the traffic to a particular port. A default deny all
rule is the last rule of every list.
2. Apply the access list to an interface in the inbound direction.
The GS716T and GS724T Smart Switches allows ACLs to be bound to physical ports and
LAGs.The switch software supports MAC ACLs and IP ACLs.
MAC ACL Example Configuration
The following example shows how to create a MAC-based ACL that permits Ethernet traffic
from the Sales department on specified ports and denies all other traffic on those ports.
1. From the MAC ACL screen, create an ACL with the name Sales_ACL for the Sales
department of your network (See
MAC ACL on page 211).
By default, this ACL will be bound on the inbound direction, which means the switch will
examine traffic as it enters the port.
2. From the MAC Rules screen, create a rule for the Sales_ACL with the following settings:
• ID: 1
• Action: Permit
• Assign Queue: 0
• Match Every: False
• CoS: 0
• Destination MAC: 01:02:1A:BC:DE:EF

NETGEAR GS716T Specifications

General

Switch type	Managed
Switch layer	L3
Quality of Service (QoS) support	Yes
Stackable	-
Certification	CE, FCC, VCCI, EN, C-Tick, CCC, CSA, UL/cUL, IEC
Product color	Blue
LED indicators	Activity, Link, Power
SFP module slots quantity	2
Basic switching RJ-45 Ethernet ports type	Gigabit Ethernet (10/100/1000)
Basic switching RJ-45 Ethernet ports quantity	16
Number of VLANs	256
Networking standards	IEEE 802.1D, IEEE 802.1as, IEEE 802.1s, IEEE 802.1v, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3i, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Copper ethernet cabling technology	10BASE-T, 100BASE-TX, 100BASE-T, 1000BASE-T
Noise level	0 dB
Mean time between failures (MTBF)	567680 h
DHCP features	DHCP client
Security algorithms	802.1x RADIUS, HTTPS, SSL/TLS
AC input voltage	100 - 240 V
AC input frequency	50 - 60 Hz
Power consumption (typical)	14.4 W
MAC address table	16000 entries
Number of static routes	32
Operating altitude	0 - 3000 m
Storage temperature (T-T)	-20 - 70 °C
Operating temperature (T-T)	0 - 50 °C
Storage relative humidity (H-H)	0 - 95 %
Operating relative humidity (H-H)	0 - 90 %
Cables included	AC
Supported network protocols	IP

Weight and Dimensions

Depth	204 mm
Width	440 mm
Height	43 mm
Weight	2570 g