Netgear FS728TLP Web Management User Guide - Page 195

ProSAFE FS526Tv2, FS726Tv2, and FS728TLP Smart Switches Settings Description CPU Notification Mode Note: This menu applies only to model 728TLP. This menu is available only if you selected a Deny link on the ACL Wizard screen and is masked out if you selected a Permit link. Specify whether PoE power is turned off to a port if the ACL rejects the traffic from the port: • Enable. PoE power to the port is turned off. To reestablish PoE power to the port, turn on the PoE power manually (see Configure the PoE Ports on page 75). • Disable. PoE power to the port is not turned off. Protocol Type (Optional) Specify the protocol that needs to be compared against the information in a packet: All, ICMP, IGMP, IP, TCP, UDP, or Other. If you select Other, enter a protocol number in the range from 0 to 255 in the field next to the menu. Src L4 Port or Dst L4 Port Specify the TCP or UDP source or destination port that needs to be compared against the information in a packet: Other, domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp, or www. Each of these selections is translated into the associated port number, which is used as both the start port and end port of the port range. If you select Other, enter a port number in the range from 0 to 65535 in the field next to the menu. Service Type (Optional) Specify the service type match conditions for the extended IP ACL rule. The possible values are IP DSCP, IP precedence, and IP ToS, which are alternative ways of specifying a match criterion for the same service type field in the IP header. Each service type uses a different user notation. Select one of the following radio buttons, and specify the value that is associated with the service type: • IP DSCP. Specifies the IP DiffServ Code Point (DSCP) field, which is defined as the high-order 6 bits of the service type octet in the IP header. Select an IP DSCP value from the menu. To specify a numeric value in the field next to the menu, select other from the menu, and enter an integer in the range from 0 to 63 in the field. • IP Precedence. Specifies the IP precedence field, which is defined as the high-order 3 bits of the service type octet in the IP header. In the field next to the radio button, enter an integer in the range from 0 to 7. • IP TOS. Specifies the Type of Service (ToS) bits, which is defined as all 8 bits of the service type octet in the IP header. In the first field next to the radio button, enter the 2-digit hexadecimal ToS bits number in the range from 00 to FF. In the second and rightmost field, enter the 2-digit hexadecimal ToS mask number, also in the range from 00 to FF. The ToS mask number specifies the bit positions that are used for comparison against the IP ToS field in a packet. For example, to check for an IP ToS value that has both bit 7 (the most significant bit) and bit 5 set and that has bit 1 clear, enter 0xA0 as the ToS bits number, and enter 0xFF as the ToS mask number. 7. Click the Apply button. Manage Access Control Lists 195