TP-Link T2600G Series User Manual

Configuring ACL Configuration Example for ACL
User Guide
827
3.2.2 Configuration Scheme
To meet the requirements above, you can set up packet filtering by creating an IP ACL and
configuring rules for it.
■ ACL Configuration
Create an IP ACL and configure the following rules for it:
■ Configure a permit rule to match packets with source IP address 10.10.70.0/24, and
destination IP address 10.10.80.0/24. This rule allows the Marketing department to
access internal network servers from intranet.
■ Configure four permit rules to match the packets with source IP address 10.10.70.0/24,
and destination ports TCP 80, TCP 443 and TCP/UDP 53. These allow the Marketing
department to visit http and https websites on the internet.
The switch matches the packets with the rules in order, starting with Rule 1. If a packet
matches a rule, the switch stops the matching process and initiates the action defined in
the rule. If no rules are matched, the packet will be dropped.
■ Binding Configuration
Bind the IP ACL to port 1/0/1 so that the ACL rules will apply to the Marketing department
only.
Demonstrated with T2600G-28TS, the following sections explain the configuration
procedure in two ways: using the GUI and using the CLI.
3.2.3 Using the GUI
1) Choose the menu SECURITY > ACL > ACL Config and click to load the following
page. Then create an IP ACL for the marketing department.
Figure 3-13 Creating an IP ACL
2) Click Edit ACL in the Operation column.

TP-Link T2600G Series Specifications

General

Model	T2600G Series
Layer	Layer 2+
Type	Managed
Uplink Ports	4 x Gigabit SFP slots
VLAN	4K VLANs
QoS	8 priority queues
Management	Web-based GUI, CLI, SNMP, RMON
Standards and Protocols	IEEE 802.3i, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3z, IEEE 802.3ad, IEEE 802.3x, IEEE 802.1d, IEEE 802.1s, IEEE 802.1w, IEEE 802.1q, IEEE 802.1p, IEEE 802.3af, IEEE 802.3at
Interface	RJ45
L2 Features	STP, RSTP, MSTP, LACP, IGMP Snooping
L3 Features	Static Routing
Security	802.1X, Port Security, DHCP Snooping, IP Source Guard, DoS Defend, ARP Inspection, SSH, SSL, ACL
MAC Address Table	16K
Jumbo Frame	9KB
Operating Temperature	0°C to 40°C
Storage Temperature	-40°C to 70°C
Operating Humidity	10% to 90% RH non-condensing
Storage Humidity	5% to 90% non-condensing