Netgear M5300-28G3 Web Management User Guide - Page 442

ProSafe M5300 Switch IP ACL An IP ACL consists of a set of rules which are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is taken and the additional rules are not checked for a match. On this menu the interfaces to which an IP ACL applies must be specified, as well as whether it applies to inbound or outbound traffic. Rules for the IP ACL are specified/created using the IP ACL Rule Configuration menu. To display the IP ACL page, click Security  ACL> Advanced  IP ACL. The IP ACL area shows the current size of the ACL table versus the maximum size of the ACL table. The current size is equal to the number of configured IPv4 plus the number of configured MAC ACLs. The maximum size is 100. To configure an IP ACL: 1. In the IP ACL ID field, specify the ACL ID or IP ACL name. The ID is an integer in the following range: • 1-99: Creates an IP Basic ACL, which allows you to permit or deny traffic from a source IP address. • 100-199: Creates an IP Extended ACL, which allows you to permit or deny specific types of layer 3 or layer 4 traffic from a source IP address to a destination IP address. This type of ACL provides more granularity and filtering capabilities than the standard IP ACL. • IP ACL Name: Create a Named IP ACL, which provides alternate to configure the IP Extended ACL. IP ACL Name string which includes alphanumeric characters only and must start with an alphabetic character. Each configured ACL displays the following information: • Rules - Displays the number of rules currently configured for the IP ACL. • Type - Identifies the ACL as a basic IP ACL, extended IP ACL and named IP ACL. 2. To delete an IP ACL, select the check box next to the IP ACL ID field, then click DELETE. 3. Click ADD to add a new IP ACL to the switch configuration. Managing Device Security 442