256 Configuring Device Information
The following is an example of the CLI commands:
ACL Overview
Access Control Lists (ACL) allow network managers to define classification actions and rules for specific
ingress ports. Packets entering an ingress port, with an active ACL, are either admitted or denied entry
and the ingress port is disabled. If they are denied entry, the user can disable the port.
Defining IP based ACLs
Access Control Lists (ACL), which are comprised of Access Control Entries (ACE), allow network
managers to define classification actions and rules for specific ingress ports. Packets entering an ingress
port, with an active ACL, are either admitted or denied entry and the ingress port is disabled. If they are
denied entry, the user can disable the port.
For example, a network administrator defines an ACL rule that states, port number 20 can receive
TCP packets, however, if a UDP packet is received, the packet is dropped.
ACLs are composed of access control entries (ACEs) that are made of the filters that determine traffic
classifications. Each ACE is a rule, and there are 1,024 rules available. But rules are not only used for user
configuration purposes, they are also used for features like iSCSI and PVE, so not all 1,024 will be
available for ACEs. It is expected that you will have at least 600 rules available.
To define IP based ACLs, click Switchâ Network Securityâ IP Based ACL. I
Console # show ports security
Port Status Action Trap Frequency Counter
----- ------- ------- ------- --------- --------
g7 Unlocked Discard Enable 100 88
g8 Unlocked Discard,
Shutdown
Disable
g3 Unlocked - - - -
To Next Page
Loading...
Need help?
General