C
HAPTER
4
| Configuring the Switch
Configuring Security
– 97 –
specifies the destination IP address and destination IP mask in the
DIP Address and DIP Mask fields; Default: Any)
Response to take when a rule is matched
◆ Action - Permits or denies a frame based on whether it matches an
ACL rule. (Default: Permit)
◆ Rate Limiter - Specifies a rate limiter (page 90) to apply to the port.
(Range: 1-16; Default: Disabled)
◆ Port Copy - Defines a port to which matching frames are copied.
(Range: 1-10; Default: Disabled)
◆ Mirror - Mirrors matching frames from this port. (Default: Disabled)
See "Configuring Port Mirroring" on page 191.
ACL-based port mirroring set by this parameter and port mirroring set
on the general Mirror Configuration page are implemented
independently. To use ACL-based mirroring, enable the Mirror
parameter on the ACE Configuration page. Then open the Mirror
Configuration page, set the “Port to mirror on” field to the required
destination port, and leave the “Mode” field Disabled.
◆ Logging - Enables logging of matching frames to the system log.
(Default: Disabled)
Open the System Log Information menu (page 197) to view any entries
stored in the system log for this entry. Related entries will be displayed
under the “Info” or “All” logging levels.
◆ Shutdown - Shuts down a port when a macthing frame is seen.
(Default: Disabled)
◆ Counter - Shows he number of frames which have matched any of the
rules defined for this ACL.
VLAN Parameters
◆ 802.1Q Tagged - Specifies whether or not frames should be 802.1Q
tagged. (Options: Any, Disabled, Enabled; Default: Any)
◆ VLAN ID Filter - Specifies the VLAN to filter for this rule.
(Options: Any, Specific (1-4095); Default: Any)
◆ Tag Priority - Specifies the User Priority value found in the VLAN tag
(3 bits as defined by IEEE 802.1p) to match for this rule. (Options: Any,
Specific (0-7); Default: Any)
To Next Page
Loading...
Need help?
General
