Netgear FSM726v3 7000 Series Managed Switch Administration Guide for Software - Page 163

NETGEAR Managed Switches Software Administration Manual, Release 8.0 Set up an IP ACL with Two Rules This section shows you how to set up an IP ACL with two rules, one applicable to TCP traffic and one to UDP traffic. The content of the two rules is the same. TCP and UDP packets will only be accepted by the 7000 Series Managed Switch if the source and destination stations have IP addresses within the defined sets. Layer 3 Switch TCP packet to 192.178.88.3 rejected Dest. IP not in range Layer 2 Switch TCP packet to 192.178.77.3 accepted Dest. IP in range Port 1/0/2 ACL 1 192.168.77.1 Figure 11-1 192.168.77.4 192.168.77.9 192.168.77.2 CLI: Setting up an IP ACL with Two Rules The following is an example of configuring ACL support on a 7000 Series Managed Switch. Create ACL 101. Define the first rule: the ACL will permit packets with a match on the specified source IP address (after the mask has been applied), that are carrying TCP traffic, and that are sent to the specified destination IP address. CLI Commands (Netgear Switch) #config (Netgear Switch) (Config)#access-list 101 permit tcp 192.168.77.0 0.0.0.255 192.178.77.0 0.0.0.255 Access Control Lists (ACLs) v1.0, October 2009 11-3