Security
139
XS728T ProSAFE 28-Port 10-Gigabit L2+ Smart Switch
3. In the ID field, enter an ID for the rule.
The valid range is 1-50.
4. Configure the following settings:
• Action. Specify what action must be taken if a packet matches the rule's criteria.
• Permit. Forwards packets that meet the ACL criteria.
• Deny. Drops packets that meet the ACL criteria.
• Match Every. Requires a packet to match the criteria of this ACL. Select Enable or
Disable. Match Every is exclusive to the other filtering rules, so if Match Every is
True, the other rules on the screen are not available.
• CoS. Requires a packet’s Class of Service (CoS) to match the CoS value listed here.
Enter a CoS value between 0–7 to apply this criteria.
• Destination MAC. Requires an Ethernet frame’s destination port MAC address to
match the address listed here. Enter a MAC address in this field. The valid format is
xx:xx:xx:xx:xx:xx.
• Destination MAC Mask. If desired, enter the MAC mask associated with the
destination MAC to match. The MAC address mask specifies which bits in the
destination MAC to compare against an Ethernet frame. Use Fs and 0s in the MAC
mask, which is in a wildcard format. An F means that the bit is not checked, and a 0 in
a bit position means that the data must equal the value given for that bit. For example,
if the MAC address is aa:bb:cc:dd:ee:ff, and the mask is 00:00:ff:ff:ff:ff, all MAC
addresses with aa:bb:xx:xx:xx:xx result in a match (where x is any hexadecimal
number). A MAC mask of 00:00:00:00:00:00 matches a single MAC address.
• EtherType Key. Requires a packet’s EtherType to match the EtherType you select.
Select the EtherType value from the drop-down list. If you select User Value, you can
enter a custom EtherType value.
• EtherType User Value. This field is configurable if you select User Value from the
EtherType drop-down list. The value you enter specifies a customized EtherType to
compare against an Ethernet frame. The valid range is 0x0600–0xFFFF.
• Source MAC. Requires a packet’s source port MAC address to match the address
listed here. Enter a MAC address in this field. The valid format is xx:xx:xx:xx:xx:xx.
• Source MAC Mask. If desired, enter the MAC mask for the source MAC address to
match. Use Fs and 0s in the MAC mask, which is in a wildcard format. An F means
that the bit is not checked, and a 0 in a bit position means that the data must equal the
value given for that bit. The valid format is xx:xx:xx:xx:xx:xx. A MAC mask of
00:00:00:00:00:00 matches a single MAC address.
• VLAN. Requires a packet’s VLAN ID to match the ID listed here. Enter the VLAN ID to
apply this criteria. The valid range is 1–4093.
• Logging. Enables or disables logging of access list (ACL) deny events.
5. Click Add.
To change a rule, select the check box associated with the rule, change the desired fields,
and click Apply.
To Next Page
Loading...
