Netgear FS728TLP Web Management User Guide - Page 214

ProSAFE FS526Tv2, FS726Tv2, and FS728TLP Smart Switches Settings Description Egress Queue Specify the egress queue that is used to handle all packets that match the ACL rule. From the menu, select the queue ID (0, 1, 2, 3, 4, 5, 6, or 7). This setting can override the existing queue ID for a packet. Match Every Specify whether all packets need to match the rule: • True. All packets need to match the rule. Other rules are not considered, and the fields and buttons below the Match Every field are masked out. • False. Not all packets need to match the rule. Other rules are also considered. CPU Notification Mode Note: This menu applies only to model 728TLP. Specify whether PoE power is turned off to a port if the ACL rejects the traffic from the port: • Enable. PoE power to the port is turned off. To reestablish PoE power to the port, turn on the PoE power manually (see Configure the PoE Ports on page 75). • Disable. PoE power to the port is not turned off. This menu is available only if the selection from the Action menu is Deny. The following fields, menus, and radio buttons are available only if the selection from the Match Every menu is False. (If the selection is True, they are masked out). Configure only the settings that apply to your network and configuration. Protocol Type Specify the protocol that needs to be compared against the information in a packet: Other, ICMP, IGMP, IP, TCP, or UDP. If you select Other, enter a protocol number in the range from 0 to 255 in the field next to the menu. Src IP Address Specify the IP address of the source device that needs to be compared against the address information in a packet. Enter an IP address in the dotted-decimal notation. Src IP Mask Specify the source IP mask that is associated with the source IP address. The IP mask specifies which bits in the source IP address need to be compared against the address information in a packet. This field is required when you configure a source IP address. Src L4 Port Dst IP Address Note: A subnet mask of 255.255.255.255 indicates that none of the bits are important. A subnet mask of 0.0.0.0 indicates that all of the bits are important. For example, if you apply source IP mask 0.0.0.255 to IP address 192.168.0.10, the ACL applies to IP addresses 192.168.0.0 through 192.168.0.255. Specify the TCP or UDP source port that needs to be compared against the information in a packet: Other, domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp, or www. Each of these selections is translated into the associated port number, which is used as both the start port and end port of the port range. If you select Other, enter a port number in the range from 0 to 65535 in the field next to the menu. Specify the IP address of the destination device that needs to be compared against the address information in a packet. Enter an IP address in the dotted-decimal notation. Manage Access Control Lists 214