Configuring IP Access Control Lists
D-Link Unified Wired and Wireless Access System
Oct. 2015 Page 362
D-Link UWS User Manual
Modifying an IP-based Rule
1. Open the IP ACL Rule Configuration page.
2. Select the desired ACL from the IP ACL menu.
3. Select the desired rule from the Rule ID menu.
4. Modify the remaining fields as needed.
5. Click Submit.
The IP-based rule is modified, and the device is updated.
Service Type Select one of the following three Match conditions for the extended IP ACL
rule. These are alternative ways of specifying a match condition for the same
Service Type field in the IP header, however each uses a different user
notation. After a selection is made, the appropriate value can be specified:
• IP DSCP: This field matches the packet DSCP value to the rule. Specify the
IP DiffServ Code Point (DSCP) field. The DSCP is defined as the high-order
six bits of the Service Type octet in the IP header. This is an optional
configuration. Enter an integer from 0 to 63. The IP DSCP is selected by
selecting one of the DSCP keyword values from a menu. If a value is to be
selected by specifying its numeric value, then select the ‘Other’ option in
the menu and a text box will appear where you can enter the numeric
value of the DSCP.
• IP Precedence: The IP Precedence field in a packet is defined as the high-
order three bits of the Service Type octet in the IP header. This is an
optional configuration. This field matches the packet IP Precedence value
to the rule when checked. Enter the IP Precedence value, an integer from
0 to 7, to match. Either the DSCP value or the IP Precedence value is used
to match packets to ACLs.
• IP TOS Bits: The IP TOS field in a packet is defined as all eight bits of the
Service Type octet in the IP header. Matches on the Type of Service bits in
the IP header when checked. For example, to check for an IP TOS value
having bits 7 and 5 set and bit 1 clear, where bit 7 is most significant, use
a TOS Bits value of 0xA0 and a TOS Mask of 0xFF. This is an optional
configuration.
– TOS Bits: This value is a hexadecimal number from 00 to FF. Requires
the bits in a packet’s TOS field to match the two-digit hexadecimal
number entered here.
– TOS Mask: This value is a hexadecimal number from 00 to FF. Specifies
the bit positions that are used for comparison against the IP TOS field
in a packet.
Note: Rules can be modified only when the ACL to which they belong is not bound to an interface.
Table 213: IP ACL Rule Configuration Fields (Cont.)
Field Description
To Next Page
Loading...
Need help?
General
Weight and Dimensions
