Planet IGS-20040MT User Manual

User’s Manual of IGS-20040MT
4.10 Access Control List
ACL is an acronym for Access Control List. It is the list table of ACEs, containing access control entries that specify individual
users or groups permitted or denied to specific traffic objects, such as a process or a program.
Each accessible traffic object contains an identifier to its ACL. The privileges determine whether there are specific traffic object
access rights.
ACL implementations can be quite complex, for example, when the ACEs are prioritized for the various situation. In networking,
the ACL refers to a list of service ports or network services that are available on a host or server, each with a list of hosts or
servers permitted or denied to use the service. ACL can generally be configured to control inbound traffic, and in this context,
they are similar to firewalls.
ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID.
There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also
contains many detailed, different parameter options that are available for individual application.
4.10.1 Access Control List Status
This Page shows the ACL status by different ACL users. Each row describes the ACE that is defined. It is a conflict if a specific
ACE is not applied to the hardware due to hardware limitations. The maximum number of ACEs is 512 on each switch. The
Voice VLAN OUI Table screen in Figure 4-10-1 appears.
Figure 4-10-1: ACL Status Page Screenshot
The Page includes the following fields:
Object Description
 User
Indicates the ACL user.
 Ingress Port
Indicates the ingress port of the ACE. Possible values are:
■ All: The ACE will match all ingress port.
■ Port: The ACE will match a specific ingress port.
 Frame Type
Indicates the frame type of the ACE. Possible values are:
■ Any: The ACE will match any frame type.
■ EType: The ACE will match Ethernet Type frames. Note that an
Ethernet Type based ACE will not get matched by IP and ARP
218

Planet IGS-20040MT Specifications

General

Switch type	Managed
Switch layer	L2+
Traffic classification	Yes
Console port	RJ-45
Fiber optic connector	MiniGBIC
SFP module slots quantity	4
Installed SFP modules quantity	0
Basic switching RJ-45 Ethernet ports type	Gigabit Ethernet (10/100/1000)
Basic switching RJ-45 Ethernet ports quantity	16
10G support	No
Number of VLANs	4095
Networking standards	IEEE 1588v2, IEEE 802.1D, IEEE 802.1Q, IEEE 802.1ab, IEEE 802.1ad, IEEE 802.1ag, IEEE 802.1p, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3ah, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Virtual LAN features	Stacked VLAN, Private VLAN, Tagged VLAN, Protocol-based VLAN
Copper ethernet cabling technology	10BASE-T, 100BASE-TX, 1000BASE-T
Stackable	-
Certification	FCC, CE
Product color	Blue, White
Housing material	Aluminum
International Protection (IP) code	IP30
Fiber ethernet cabling technology	100BASE-FX, 1000BASE‑BX, 1000BASE‑LX, 1000BASE‑SX
Throughput	29.7 Mpps
Jumbo frames	9216
MAC address table	8000 entries
Number of IP interfaces	8
Power consumption (max)	17 W
Power consumption (typical)	8 W
Heat dissipation	27 BTU/h
Storage temperature (T-T)	-40 - 85 °C
Operating temperature (T-T)	-40 - 75 °C
Operating relative humidity (H-H)	5 - 95 %
Supported network protocols	IPv4 / IPv6
Authentication	MAC-based authentication, Port-based authentication
Security algorithms	802.1x RADIUS, SSH, SSL/TLS
Number of multicast groups filtered	255
Harmonized System (HS) code	85176990

Weight and Dimensions

Depth	107.3 mm
Width	76.8 mm
Height	152 mm
Weight	1043 g