NETGEAR GS724Tv3 - ProSafe Gigabit Managed Switch

GS716Tv2 and GS724Tv3 Software Administration Manual
5-54 Managing Device Security
v1.0, July 2009
5. Click Apply to save any changes to the running configuration.
IP Binding Configuration
When an ACL is bound to an interface, all the rules that have been defined are applied to the
selected interface. Use the IP Binding Configuration page to assign ACL lists to ACL Priorities
and Interfaces.
To display the IP Binding Configuration page:
1. Click Security  ACL, then click the Advanced  IP Binding Configuration link.
Dst L4 Port Requires a packet’s TCP/UDP destination port to match the port listed
here. Complete one of the following fields:
• Destination L4 Keyword: Select the desired L4 keyword from a list of
destination ports on which the rule can be based.
• Destination L4 Port Number: If the destination L4 keyword is Other,
e
nter a user-defined Port ID by which packets are matched to the rule.
Service Type Select one of the following three Match fields to use in matching packets
to ACLs:
• IP DSCP: Matches the packet DSCP value to the rule. Either the
DSCP value or the IP Precedence value is used to match packets to
ACLs. Select the desired value from the drop down menu of DSCP
keyword values.
• IP Precedence: Matches the packet IP Precedence value to the rule
when checked. Enter the IP Precedence value to match. Either the
DSCP value or the IP Precedence value is used to match packets to
ACLs.
• IP TOS Bits: Matches on the Type of Service bits in the IP header
when checked.
- TOS Bits: Requires the bits in a packet’s TOS field to match the
two-digit hexadecimal number entered here.
- TOS Mask: Specifies the bit positions that are used for comparison
against the IP TOS field in a packet.
Table 5-36. IP ACL Rule Configuration Fields (continued)
Field Description