A
CCESS
C
ONTROL
L
ISTS
2-57
Configuring Access Control Lists
An ACL is a sequential list of permit or deny conditions that apply to IP
addresses, MAC addresses, or other more specific criteria. This switch tests
incoming packets against the conditions in an ACL one by one. If a list
contains all permit rules, a packet will be accepted as soon as it passes any
of the rules. If a list contains all deny rules, a packet will be rejected as soon
as it fails any one of the rules. In other words, if no rules match for a
permit list, the packet is dropped; and if no rules match for a deny list, the
packet is accepted.
Note:An ACL can contain up to 32 rules.
Command Attributes
ACL Configuration – Setting the Name and Type
• Name – Name of the ACL. (Maximum length: 16 characters)
• Type – There are three filtering modes:
- Standard: IP ACL mode that filters packets based on the source IP
address.
- Extended: IP ACL mode that filters packets based on source or
destination IP address, as well as protocol type and TCP/UDP port
number. If the “TCP” protocol type is specified, then you can also
filter packets based on the TCP control code.
- MAC: MAC ACL mode that filters packets based on the source or
destination MAC address and the Ethernet frame type (RFC 1060).
ACL Configuration – Configuring a Standard IP ACL
• Action – An ACL can contain all permit rules or all deny rules.
(Default: Permit rules)
To Next Page
Loading...
Need help?
General
