195
Operation: Select the operation for the switch to process packets which match
rules.
Permit: Forward packets.
Deny: Discard Packets.
S-MAC: Enter the source MAC address contained in the rule.
D-MAC: Enter the destination MAC address contained in the rule.
Mask: Enter IP address mask. If it is set to 1, it must strictly match
address.
VLAN ID Enter the VLAN ID contained in the rule.
EtherType Enter EtherType contained in the rule.
User Priority
Select the user priority contained in the rule for the tagged packets to
match.
Fragment: Select if the rule will take effect o
n the fragment packets. When the
fragment is selected, this rule will process all the fragments and the
last piece of fragment will be always forwarded.
S-IP: Enter the source IP address contained in the rule.
D-IP: Enter the destination IP address contained in the rule.
Mask:
Enter IP address mask. If it is set to 1, it must strictly match the
address.
Time-Range: Select the time-range for the rule to take effect.
12.3 Policy Config
A Policy is used to control the data packets those match the corresponding ACL rules by
configuring ACLs and actions together for effect. The operations here include stream mirror,
stream condition, QoS remarking and redirect.
The Policy Config can be implemented on Policy Summary, Police Create and Action Create
pages.
12.3.1 Policy Summary
On this page, you can view the ACL and the corresponding operations in the policy.
Choose the menu ACL→Policy Config→Policy Summary to load the following page.
Figure 12-9 Policy Summary