NETGEAR ProSafe GSM7248

User Manual for the NETGEAR 7200 Series Layer 2 Managed Switch Software Version 4
Quality of Service (QoS) Commands 10-5
202-10102-01, May 2005
Rule Number The ordered rule number identifier defined within the MAC ACL.
Action Displays the action associated with each rule. The possible values are
Permit or Deny.
Source MAC Address Displays the source MAC address for this rule.
Source MAC Mask Displays the source MAC mask for this rule.
Destination MAC Address Displays the destination MAC address for this rule.
Destination MAC Mask Displays the destination MAC mask for this rule.
Ethertype Displays the Ethertype keyword or custom value for this rule.
VLAN ID Displays the VLAN identifier value or range for this rule.
COS Displays the COS (802.1p) value for this rule.
Assign Queue Displays the queue identifier to which packets matching this rule are
assigned.
Redirect Interface Displays the slot/port to which packets matching this rule are for-
warded.
IP Access Control List (ACL) Commands
IP Access Control Lists (ACLs) ensure that only authorized users have access to specific resources
while blocking off any unwarranted attempts to reach network resources.
• IP ACL configuration for IP packet fragments is not supported.
• The maximum number of ACLs of any type that can be created is 100.
• The maximum number of rules per IP ACL translates into the number of hardware classifier
entries used when an IP ACL is attached to an interface. Increasing these values in the
software increases the RAM and NVSTORE usage.
• ACLs are configured separately for Layer 2 and Layer 3/Layer 4. Some types of hardware do
not allow both types of ACLs to be applied to the same interface.
• Wildcard masking for ACLs operates differently from a subnet mask. A wildcard mask is in
essence the inverse of a subnet mask. With a subnet mask, the mask has ones (1's) in the bit
positions that are used for the network address, and has zeros (0's) for the bit positions that are
not used. In contrast, a wildcard mask has (0’s) in a bit position that must be checked. A ‘1’ in
a bit position of the ACL mask indicates the corresponding bit can be ignored.