NETGEAR S3300 - Page 272

Managing Device Security
272
S3300 Smart Managed Pro Switch
6. Specify the additional match criteria for the selected ACL type.
The rest of the rule match criteria fields available for configuration depend on the selected
ACL
type. For information about the possible match criteria fields, see Table 95.
Table 95. ACL fields according to selected ACL type
ACL Based On Fields
• Destination MAC. Specify the destination MAC address to compare against an
ethernet frame. The valid format is (xx:xx:xx:xx:xx:xx). The BPDU keyword
might be specified using a destination MAC address of 01:80:C2:xx:xx:xx.
• Destina
tion MAC Mask. Specify the destination MAC address mask specifying
which bits in the destination MAC to compare against an ethernet frame. The
valid format is (xx:xx:xx:xx:xx:xx). The BPDU keyword might be specified
using a destination MAC mask of 00:00:00:ff:ff:ff.
• VLAN. S
pecify the VLAN ID to match within the Ethernet frame.
• Source
MAC. Specify the source MAC address to compare against an
ethernet frame. The valid format is (xx:xx:xx:xx:xx:xx).
• Source MAC Mask. S
pecify the source MAC address mask specifying which
bits in the source MAC to compare against an ethernet frame. Valid format is
(xx:xx:xx:xx:xx:xx).
• VLAN. S
pecify the VLAN ID to match within the Ethernet frame.
• Destination IP Address. Specify the destination IP address.
• Destina
tion IP Mask. Specify the destination IP address mask.
• Source IP Address. Specify the source IP address.
• Source IP
Mask. Specify the source IP address mask.
• Destination Prefix. Specify the destination prefix.
• D
estination Prefix Length. Specify the destination prefix length.
• Source Prefix. Specify the source destination prefix.
• Source
Prefix Length. Specify the source prefix length.
• Destination L4 port (protocol). Specify the destination IPv4 L4 port protocol.
• Destina
tion L4 port (value). Specify the destination IPv4 L4 port value.
• Source L4 port (protocol). Specify the source IPv4 L4 port protocol.
• Source L4
port (value). Specify the source IPv4 L4 port value.
• Destination L4 port (protocol). Specify the destination IPv6 L4 port protocol.
• Destina
tion L4 port (value). Specify the destination IPv6 L4 port value.
• Source L4 port (protocol). Specify the source IPv6 L4 port protocol.
• Source L4
port (value). Specify the source IPv6 L4 port value.
7. In the Binding Configuration area, specify the packet filtering direction for an ACL in the
Direction field.
Only the inbound direction is valid for the switches.
8. In
the Port Selection Table area, select each port and LAG to which the ACL is applied.
Destination MAC
Source MAC
Destination IPv4
Source IPv4
Destination IPv6
Source IPv6
Destination IPv4 L4
Port
Source IPv4 L4 Port
Destination IPv6 L4
Port
Source IPv6 L4 Port