Home » Netgear Manuals » Hubs & Switches » Netgear M5300-28G3 » Manual Viewer

Netgear M5300-28G3 Web Management User Guide - Page 436

ACL Based on Destination IPv6 L4 Port

Add to My Manuals
Save this manual to your list of manuals

Page 436 highlights

ProSafe M5300 Switch Note: There is an implicit "deny all" rule at the end of an ACL list. This means that if an ACL is applied to a packet and if none of the explicit rules match, then the final implicit "deny all" rule applies and the packet is dropped. To use the ACL Wizard to configure an ACL: 1. Use ACL Type to specifies the ACL type you are using to create the ACL. You can select one type from 10 optional types: • ACL Based on Destination MAC - To create a ACL based on the destination MAC address, destination MAC mask and VLAN. • ACL Based on Source MAC - To create a ACL based on the source MAC address, source MAC mask and VLAN. • ACL Based on Destination IPv4 - To create a ACL based on the destination IPv4 address and IPv4 address mask. • ACL Based on Source IPv4 - To create a ACL based on the source IPv4 address and IPv4 address mask. • ACL Based on Destination IPv6 - To create a ACL based on the destination IPv6 prefix and IPv6 prefix length. • ACL Based on Source IPv6 - To create a ACL based on the source IPv6 prefix and IPv6 prefix length. • ACL Based on Destination IPv4 L4 Port - To create a ACL based on the destination IPv4 layer4 port number. • ACL Based on Source IPv4 L4 Port - To create a ACL based on the source IPv4 layer4 port number. • ACL Based on Destination IPv6 L4 Port - To create a ACL based on the destination IPv6 layer4 port number. • ACL Based on Source IPv6 L4 Port - To create a ACL based on the source IPv6 layer4 port number. 2. Use Rule ID to enter a whole number in the range of 1 to 1023 that will be used to identify the rule. 3. Use Action to specify what action should be taken if a packet matches the rule's criteria. The choices are permit or deny. 4. Use Destination MAC to specify the destination MAC address to compare against an Ethernet frame. Valid format is (xx:xx:xx:xx:xx:xx). The BPDU keyword may be specified using a Destination MAC address of 01:80:C2:xx:xx:xx. 5. Use Destination MAC Mask to specify the destination MAC address mask specifying which bits in the destination MAC to compare against an Ethernet frame. Valid format is (xx:xx:xx:xx:xx:xx). The BPDU keyword may be specified using a Destination MAC mask of 00:00:00:ff:ff:ff. 6. Click ADD to add a new rule to the ACL based on destination MAC. Managing Device Security 436

Section	Page
ProSafe M5300 Switch	1
Contents	3
1. Getting Started	9
Switch Management Interface	9
Web Access	9
Understanding the User Interfaces	10
Using the Web Interface	10
Interface Naming Convention	17
2. Configuring System Information	19
Management	19
System Information	20
Switch Statistics	24
System CPU Status	26
Slot Information	27
Loopback Interface	29
Network Interface	30
Time	34
DNS	40
SDM Template Preference	42
License	43
License Key	43
License Features	44
Services	45
DHCP Server	45
DHCP Relay	53
DHCP L2 Relay	54
UDP Relay	57
DHCPv6 Server	59
DHCPv6 Relay	66
Stacking	68
Stack Features	68
Firmware Synchronization and Upgrade	69
Configuration Maintenance	69
Stack Master Election	70
Factory Defaults Reset Behavior	70
Nonstop Forwarding	71
Stack Configuration	72
Stack Port Configuration	74
Stack Port Diagnostics	76
Stack Firmware Synchronization	77
NSF	78
Checkpoint Statistics	80
PoE (M5300-28G-POE+ and M5300-52G-POE+ Only)	82
Basic PoE Configuration	83
PoE Port Configuration	84
SNMP	87
SNMPV1/V2	87
SNMP V3 User Configuration	92
LLDP	93
LLDP	93
LLDP-MED	100
ISDP	109
ISDP Global Configuration	109
Advanced ISDP Configuration	110
Timer Schedule	114
Timer Global Configuration	114
Timer Schedule Configuration	115
3. Configuring Switching Information	119
VLANs	119
Basic	120
Advanced	122
Auto-VoIP Configuration	134
Protocol-Based	134
OUI-Based	136
iSCSI	139
Basic	139
Advanced	141
Spanning Tree Protocol	143
Basic	143
Advanced	145
Multicast	156
MFDB	156
IGMP Snooping	158
MLD Snooping	167
MVR Configuration	173
Basic	173
Advanced	174
Address Table	177
Basic	177
Advanced	179
Ports	181
Port Configuration	181
Port Description	182
Link Aggregation Groups	184
LAG Configuration	184
LAG Membership	186
4. Routing	189
Routing Table	189
Basic	190
Advanced	192
IP	193
Basic	193
Advanced	197
IPv6	201
Basic	201
Advanced	204
VLAN	218
VLAN Routing Wizard	218
VLAN Routing Configuration	219
ARP	220
Basic	221
Advanced	221
RIP	225
Basic	225
Advanced	226
OSPF	232
Basic	232
Advanced	233
OSPFv3	257
Basic	257
Advanced	258
Router Discovery	279
Router Discovery Configuration	279
VRRP	280
Basic	280
Advanced	282
Multicast	286
Mroute Table	287
Multicast Global Configuration	288
Multicast Interface Configuration	289
DVMRP	290
IGMP	296
PIM	304
Static Routes Configuration	311
Admin Boundary Configuration	312
IPv6 Multicast	313
Mroute Table	313
IPv6 PIM	314
MLD	321
Static Routes Configuration	329
5. Configuring Quality of Service	331
Class of Service	331
Basic	332
Advanced	333
Differentiated Services	339
DiffServ Wizard	340
Basic	341
Advanced	343
6. Managing Device Security	355
Management Security Settings	355
Local User	356
Enable Password Configuration	358
Line Password Configuration	358
RADIUS	359
Configuring TACACS+	364
Authentication List Configuration	366
Login Sessions	371
Configuring Management Access	372
HTTP	372
HTTPS	373
SSH	377
Telnet	380
Console Port	381
Denial of Service	382
Access Control	384
Port Authentication	386
Basic	387
Advanced	389
Traffic Control	397
MAC Filter	397
Port Security	399
Private Group	404
Protected Ports Configuration	406
Private VLAN	407
Storm Control	412
Control	414
DHCP Snooping	414
IP Source Guard	419
Dynamic ARP Inspection	421
Captive Portal	426
Configuring Access Control Lists	435
ACL Wizard	435
Basic	437
Advanced	441
7. Monitoring the System	457
Ports	457
Port Statistics	458
Port Detailed Statistics	459
EAP Statistics	466
Cable Test	467
Logs	468
Buffered Logs	469
Command Log Configuration	470
Console Log Configuration	471
SysLog Configuration	471
Trap Logs	472
Event Logs	474
Persistent Logs	476
Port Mirroring	477
Multiple Port Mirroring	477
sFlow	479
Basic	479
Advanced	480
8. Maintenance	483
Save Configuration	483
Save Configuration	483
Auto Install Configuration	484
Reset	485
Device Reboot	485
Factory Default	486
Password Reset	486
Upload File From Switch	487
File Upload	487
HTTP File Upload	488
USB File Upload	489
Download File To Switch	490
File Download	490
HTTP File Download	492
USB File Download	494
File Management	495
Copy	495
Dual Image Configuration	496
Troubleshooting	497
Ping IPv4	497
Ping IPv6	498
Traceroute IPv4	499
Traceroute IPv6	500
9. Help	501
Online Help	501
Support	501
User Guide	502
Registration	503
A. Default Settings	505
B. Configuration Examples	509
Virtual Local Area Networks (VLANs)	509
VLAN Example Configuration	510
Access Control Lists (ACLs)	511
MAC ACL Example Configuration	512
Standard IP ACL Example Configuration	513
Differentiated Services (DiffServ)	514
Class	514
DiffServ Traffic Classes	515
Creating Policies	515
DiffServ Example Configuration	517
802.1X	518
802.1X Example Configuration	520
MSTP	521
MSTP Example Configuration	523
C. Notification of Compliance	525

Match case Limit results 1 per page

Managing Device Security

436

ProSafe M5300 Switch

Note:

There is an implicit “deny all” rule at the end of an ACL list. This

means that if an ACL is applied to a packet and if none of the explicit

rules match, then the final implicit “deny all” rule applies and the

packet is dropped.

To use the ACL Wizard to configure an ACL:

Use

ACL Type

to specifies the ACL type you are using to create the ACL. You can

select one type from 10 optional types:

•

ACL Based on Destination MAC

- To create a ACL based on the destination MAC

address, destination MAC mask and VLAN.

•

ACL Based on Source MAC

- To create a ACL based on the source MAC address,

source MAC mask and VLAN.

•

ACL Based on Destination IPv4

- To create a ACL based on the destination IPv4

address and IPv4 address mask.

•

ACL Based on Source IPv4

- To create a ACL based on the source IPv4 address

and IPv4 address mask.

•

ACL Based on Destination IPv6

- To create a ACL based on the destination IPv6

prefix and IPv6 prefix length.

•

ACL Based on Source IPv6

- To create a ACL based on the source IPv6 prefix and

IPv6 prefix length.

•

ACL Based on Destination IPv4 L4 Port

- To create a ACL based on the destination

IPv4 layer4 port number.

•

ACL Based on Source IPv4 L4 Port

- To create a ACL based on the source IPv4

layer4 port number.

•

ACL Based on Destination IPv6 L4 Port

- To create a ACL based on the destination

IPv6 layer4 port number.

•

ACL Based on Source IPv6 L4 Port

- To create a ACL based on the source IPv6

layer4 port number.

Use

Rule ID

to enter a whole number in the range of 1 to 1023 that will be used to identify

the rule.

Use

Action

to specify what action should be taken if a packet matches the rule's criteria.

The choices are permit or deny.

Use

Destination MAC

to specify the destination MAC address to compare against an

Ethernet frame. Valid format is (xx:xx:xx:xx:xx:xx). The BPDU keyword may be specified

using a Destination MAC address of 01:80:C2:xx:xx:xx.

Use

Destination MAC Mask

to specify the destination MAC address mask specifying which

bits in the destination MAC to compare against an Ethernet frame. Valid format is

(xx:xx:xx:xx:xx:xx). The BPDU keyword may be specified using a Destination MAC mask of

00:00:00:ff:ff:ff.

Click

ADD

to add a new rule to the ACL based on destination MAC.