7-1
C
HAPTER
7
A
CCESS
C
ONTROL
L
ISTS
Access Control Lists (ACL) provide packet filtering for IPv4 frames (based
on address, protocol, Layer 4 protocol port number or TCP control code),
IPv6 frames (based on address, next header type, or flow label), or any
frames (based on MAC address or Ethernet type). To filter incoming
packets, first create an access list, add the required rules, and then bind the
list to a specific port.
Configuring Access Control Lists
An ACL is a sequential list of permit or deny conditions that apply to IP
addresses, MAC addresses, or other more specific criteria. This switch tests
ingress packets against the conditions in an ACL one by one. A packet will
be accepted as soon as it matches a permit rule, or dropped as soon as it
matches a deny rule. If no rules match, the packet is accepted.
Command Usage
The following restrictions apply to ACLs:
• Each ACL can have up to 32 rules.
• The maximum number of ACLs is also 32.
• The maximum number of rules that can be bound to the ports is 96 for
each of the following list types: MAC ACLs, IP ACLs (including
Standard and Extended ACLs), IPv6 Standard ACLs, and IPv6
Extended ACLs. For the SMC8824M, all ports share this quota. For the
SMC8848M, ports 1-24 share a quota of 96 rules, and ports 25-50 share
another quota of 96 rules (since there are two switch chips in this
system).
To Next Page
Loading...
Need help?
General
