Cisco SRW2008P User Guide - Page 38

ACL Name, New ACL Name, Delete ACL, Action, Permit, Shutdown, Source MAC Address, Wildcard Mask,

Page 38 highlights

Chapter 5 Advanced Configuration The MAC Based ACL screen allows a MAC based ACL to be defined. ACEs can be added only if the ACL is not bound to an interface. ACL Name Displays the user-defined MAC based ACLs. New ACL Name Specifies a new user-defined MAC based ACL name. Delete ACL Deletes the selected ACL. Action Indicates the ACL forwarding action. Possible field values are: •• Permit Forwards packets which meet the ACL criteria. •• Deny Drops packets which meet the ACL criteria. •• Shutdown Drops packet that meet the ACL criteria, and disables the port to which the packet was addressed. Source MAC Address Matches the source MAC address to which packets are addressed to the ACE. Wildcard Mask Defines the source IP address wildcard mask. Wildcard masks specify which bits are used and which bits are ignored. A wild card mask of 255.255.255.255 indicates that no bit is important. A wildcard of 0.0.0.0 indicates that all the bits are important. For example, if the source IP address 149.36.184.198 and the wildcard mask is 255.36.184.00, the first eight bits of the IP address are ignored, while the last eight bits are used. Dest. MAC Address Matches the destination MAC address to which packets are addressed to the ACE. Wildcard Mask Defines the destination IP address wildcard mask. VLAN ID Matches the packet's VLAN ID to the ACE. The possible field values are 2 to 4094. Ether Type Specifies the packet's Ethernet type. The Add to List button adds the configured MAC Based ACLs to the MAC Based ACL Table at the bottom of the screen. Security > ACL Binding Security > ACL Binding When an ACL is bound to an interface, all the ACE rules that have been defined are applied to the selected interface. Whenever an ACL is assigned on a port or LAG, flows from that ingress interface that do not match the ACL are matched to the default rule, which is Drop unmatched packets. Interface Indicates the interface to which the ACL is bound. ACL Name Indicates the ACL which is bound to the interface. The Add to List button adds the ACL Binding configuration to the ACL Binding Table at the bottom of the screen. Security > RADIUS 8-Port 10/100/1000 Gigabit Switch with Webview Security > RADIUS 32

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81

Chapter 5
Advanced Configuration
32
8-Port 10/100/1000 Gigabit Switch with Webview
The
MAC Based ACL
screen allows a MAC based ACL to be
defined. ACEs can be added only if the ACL is not bound
to an interface.
ACL Name
Displays the user-defined MAC based ACLs.
New ACL Name
Specifies a new user-defined MAC based
ACL name.
Delete ACL
Deletes the selected ACL.
Action
Indicates the ACL forwarding action. Possible field
values are:
Permit
Forwards
packets
which
meet
the
ACL
criteria.
Deny
Drops packets which meet the ACL criteria.
Shutdown
Drops packet that meet the ACL criteria,
and disables the port to which the packet was
addressed.
Source MAC Address
Matches the source MAC address
to which packets are addressed to the ACE.
Wildcard Mask
Defines the source IP address wildcard
mask. Wildcard masks specify which bits are used and
which bits are ignored. A wild card mask of 255.255.255.255
indicates that no bit is important. A wildcard of 0.0.0.0
indicates that all the bits are important. For example, if the
source IP address 149.36.184.198 and the wildcard mask
is 255.36.184.00, the first eight bits of the IP address are
ignored, while the last eight bits are used.
Dest.
MAC
Address
Matches
the
destination
MAC
address to which packets are addressed to the ACE.
Wildcard
Mask
Defines
the
destination
IP
address
wildcard mask.
VLAN ID
Matches the packet’s VLAN ID to the ACE. The
possible field values are 2 to 4094.
Ether Type
Specifies the packet’s Ethernet type.
The
Add to List
button adds the configured MAC Based
ACLs to the MAC Based ACL Table at the bottom of the
screen.
Security > ACL Binding
Security > ACL Binding
When an ACL is bound to an interface, all the ACE rules that
have been defined are applied to the selected interface.
Whenever an ACL is assigned on a port or LAG, flows
from that ingress interface that do not match the ACL are
matched to the default rule, which is Drop unmatched
packets.
Interface
Indicates the interface to which the ACL is
bound.
ACL Name
Indicates the ACL which is bound to the
interface.
The
Add to List
button adds the ACL Binding configuration
to the ACL Binding Table at the bottom of the screen.
Security > RADIUS
Security > RADIUS