Assistance in the Protection from Un-
authorized Access
110
6.8
Access Control Lists (ACL)
UM Basic Configuration L3P
Release
7.1
12/2011
Note: You configure Access Control Lists via the Command Line Interface.
You will find details on this in the document “Reference Manual Command
Line Interface“.
The sequence used in defining the rules of a list and the sequence in which
these lists are connected to an interface determines the sequence in which
the rules and lists are used (see on page 119 “Specifying the Sequence of
the Rules”).
Note: With PowerMICE and MACH 4000, you can use either MAC-based or
IP-based ACLs for each interface.
With MACH 4002-24G/48G, you can use both MAC-based and IP-based
ACLs for each interface.
6.8.1 Description of prioritizing with ACLs
Prioritizing with ACLs provides you with an extension of the prioritizing
function. Using the “assign queue” ACL action, you can perform extended
prioritizing using protocols, source and destination addresses, VLAN ID, and
so on (see on page 111 “Description of IP-based ACLs”),(see on page 112
“Description of MAC-based ACLs”).
If an ACL rule containing an assign queue action applies to a packet
received, the device modifies the priority information in the data packet (see
on page 168 “QoS/Priority”) according to the specified (see table 5) assign
queue parameter. This procedure is known as ACL remarking. The device
sends the data packets with the modified priority information.
To Next Page
Loading...
Need help?
General
