D-Link DWS-4026 Product Manual - Page 345

Software User Manual 12/10/09 D-Link Unified Access System IP ACCESS CONTROL LISTS IP access control lists (ACL) allow network managers to define classification actions and rules for specific ports. ACLs are composed of access control entries (ACE), or rules, that consist of the filters that determine traffic classifications. The total number of rules that can be defined for each ACL is 12. These rules are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is taken, including dropping the packet or disabling the port, and the additional rules are not checked for a match. For example, a network administrator defines an ACL rule that says port number 20 can receive TCP packets. However, if a UDP packet is received the packet is dropped. The IP Access Control List folder contains links to the following web pages that allow you to configure and view IP ACLs: • "IP ACL Configuration" • "IP ACL Rule Configuration" First, you use the "IP ACL Configuration" page to define the IP ACL type and assign an ID to it. Then, you use the "IP ACL Rule Configuration" page to create rules for the ACL. Finally, you use the "ACL Interface Configuration" page to assign the ACL by its ID number to a port. IP ACL Configuration Use the IP ACL Configuration page to add or remove IP-based ACLs. On this menu the interfaces to which an IP ACL applies must be specified, as well as whether it applies to inbound or outbound traffic. Rules for the IP ACL are specified/created using the "IP ACL Rule Configuration" page. To display the IP ACL Configuration page, click LAN > Access Control Lists > IP Access Control Lists > Configuration in the navigation menu. Figure 242: IP ACL Configuration Document 34CSFP6XXUWS-SWUM100-D7 Configuring Access Control Lists Page 345