Manage Device Security
290
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual
If one or more rules exist for the ACL, the rules display in the Basic ACL Rule Table.
6. From the ACL ID menu, select the IP ACL for which you want to add a rule.
For basic IP ACLs, this must be an ID in the range from 1 to 99.
7. Click the Add button.
8. Specify the following match criteria for the rule:
• Rule ID. Enter an ACL sequence number in the range of 1 to 50 that is used to
identify the rule. An IP ACL can contain up to 50 rules.
• Action. Select the ACL forwarding action, which is one of the following:
- Permit. Forward packets that meet the ACL criteria.
- Deny. Drop packets that meet the ACL criteria.
• Logging. If the selection from the Action menu is Deny, you can enable logging for
the ACL by selecting the Enable radio button. (Logging is subject to resource
availability in the device.)
If the access list trap flag is also enabled, periodic traps are generated, indicating the
number of times this rule was evoked during the report interval. A fixed five-minute
report interval is used for the switch. A trap is not issued if the ACL rule hit count is
zero for the current interval.
• Match Every. Select a radio button to specify whether all packets must match the
selected IP ACL rule:
- Enable. All packets must match the selected IP ACL rule and are either permitted
or denied.
- Disable. Not all packets need to match the selected IP ACL rule.
• Src IP Address. Enter an IP address using dotted-decimal notation to be compared
to a packet’s source IP address as a match criterion for the selected IP ACL rule.
• Src IP Mask. Specify the IP mask in dotted-decimal notation to be used with the
source IP address value.
9. Click the Apply button.
To Next Page
Loading...
Need help?
General
