TP-Link T2600G Series User Manual

Configuring ACL Configuration Example for ACL
User Guide
835
3.3 Configuration Example for Combined ACL
3.3.1 Network Requirements
To enhance network security, a company requires that only the network administrator can
log in to the switch through Telnet connection. The computers are connected to the switch
via port 1/0/2. The network topology is shown as below.
Figure 3-23 Network Topology
Internet
Gi1/0/1
Network administrator's PC
MAC: 6C-62-6D-F5-BA-48
Gi1/0/2
3.3.2 Configuration Scheme
To meet the requirements above, you can set up packet filtering by creating a Combined
ACL and configuring rules for it.
■ ACL Configuration
Create a Combined ACL and configure the following rules for it:
■ Configure a permit rule to match packets with source MAC address 6C-62-6D-F5-
BA-48, and destination port TCP 23. This rule allows the computer of the network
administrator to access the switch through Telnet connection.
■ Configure a deny rule to match all the packets except the packets with source MAC
address 6C-62-6D-F5-BA-48 and destination port TCP 23. This rule blocks the Telnet
connection to the switch of other computers.
■ Configure a permit rule to match all the packets. This rule allows that other devices are
given the network services except Telnet connection.
The switch matches the packets with the rules in order, starting with Rule 1. If a packet
matches a rule, the switch stops the matching process and initiates the action defined in
the rule.

TP-Link T2600G Series Specifications

General

Model	T2600G Series
Layer	Layer 2+
Type	Managed
Uplink Ports	4 x Gigabit SFP slots
VLAN	4K VLANs
QoS	8 priority queues
Management	Web-based GUI, CLI, SNMP, RMON
Standards and Protocols	IEEE 802.3i, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3z, IEEE 802.3ad, IEEE 802.3x, IEEE 802.1d, IEEE 802.1s, IEEE 802.1w, IEEE 802.1q, IEEE 802.1p, IEEE 802.3af, IEEE 802.3at
Interface	RJ45
L2 Features	STP, RSTP, MSTP, LACP, IGMP Snooping
L3 Features	Static Routing
Security	802.1X, Port Security, DHCP Snooping, IP Source Guard, DoS Defend, ARP Inspection, SSH, SSL, ACL
MAC Address Table	16K
Jumbo Frame	9KB
Operating Temperature	0°C to 40°C
Storage Temperature	-40°C to 70°C
Operating Humidity	10% to 90% RH non-condensing
Storage Humidity	5% to 90% non-condensing