Netgear XCM8806 Chassis User Manual - Page 317

NETGEAR 8800 User Manual and above the System zone. You can add applications to that zone and assign their priority. The example below shows the ACL zone priority that would result from adding the MacInMac and Cli applications to MY_HIGH_ZONE: 1. DOS Zone hal DoS 2. MY_HIGH_ZONE MacInMac  Cli 3. SYSTEM Zone Cli IpSecurity  NetLogin  HealthCheckLAG  IdentityManager 4. SECURITY Zone Sentriant Generic Xml 5. SYSTEM_LOW_ZONE hal Applications can insert an ACL into any of the zones to which the application belongs. If an application attempts to insert an ACL into a zone where the application is not configured, an error message appears, and the ACL is not installed. Therefore, you have full control of ACL priorities and you can configure the switch to install ACLs from an application at any priority level. In the example above, the application Cli can insert an ACL into either MY_HIGH_ZONE or the SYSTEM zone. The location of the ACL within the zone depends on the priority assigned by the application. An application can assign priority to an ACL using: • Priority attributes (first or last) • Relative priority • Priority numbers The priority attributes first (highest priority) and last (lowest priority) can be applied to an ACL to establish its position within a zone. Relative priority sets the ACL priority relative to another ACL already installed by the application in the same zone. Priority numbers allow an application to specify the priority of an ACL within a zone. The priority numbers are unsigned integers from 0 to 7; a lower number represents a higher priority. This means that if an application adds an ACL at priority 5 and later adds another ACL at priority 3, the second ACL has higher priority. Chapter 13. ACLs | 317