NETGEAR ProSAFE M7100-24X - IP Access Control List (ACL) Commands

Quality of Service (QoS) Commands
254
ProSAFE M7100 Managed Switches
IP Access Control List (ACL) Commands
This section describes the commands you use to configure IP ACL settings. IP ACLs ensure that
only authorized users have access to specific resources and block any unwarranted attempts to
reach network resources.
The following rules apply to IP ACLs:
• Managed switch software does not support IP ACL configuration for IP packet fragments.
• The maximum number of ACLs you c
an create is hardware-dependent. The limit applies to all
ACLs, regardless of type.
• The maximum number of rules per IP ACL is har
dware-dependent.
• Wildcard masking for ACLs operates differently from a subnet mask. A wildcard mask is in
es
sence the inverse of a subnet mask. With a subnet mask, the mask has ones (1's) in the bit
positions that are used for the network address, and has zeros (0's) for the bit positions that
are not used. In contrast, a wildcard mask has (0’s) in a bit position that must be checked. A
‘1’ in a bit position of the ACL mask indicates the corresponding bit can be ignored.
Source MAC
Address
The source MAC address for this rule.
Destination MAC
Addres
s
The destination MAC address for this rule.
Ethertype The Ethertype keyword or custom value for this rule.
VLAN ID The VLAN identifier value or range for this rule.
COS The COS (802.1p) value for this rule.
Log Displays when you enable logging for the rule.
Assign Queue The queue identifier to which packets matching this rule are assigned.
Mirror Interface The slot/port to which packets matching this rule are copied.
Redirect Interface The slot/port to which packets matching this rule are forwarded.
Time Range name Displays the name of the time-range if the MAC ACL rule has referenced a time range.
Rule Status
Status (Active/Inactive) of the MAC ACL rule
Term Definition