C
ONFIGURING
THE
S
WITCH
3-98
Command Usage
The following restrictions apply to ACLs:
• Each ACL can have up to 60 rules.
• This switch supports ACLs for ingress filtering only. However, you can
only bind one IP ACL to any port for ingress filtering. In other words,
only one ACL can be bound to an interface - Ingress IP ACL.
The order in which active ACLs are checked is as follows:
1. User-defined rules in the Ingress IP ACL for ingress ports.
2. Explicit default rule (permit any any) in the ingress IP ACL for ingress
ports.
3. If no explicit rule is matched, the implicit default is permit all.
Setting the ACL Name and Type
Use the ACL Configuration page to designate the name and type of an
ACL.
Command Attributes
• Name – Name of the ACL. (Maximum length: 16 characters)
• Type – There are three filtering modes:
- Standard: IP ACL mode that filters packets based on the source IP
address.
- Extended: IP ACL mode that filters packets based on source or
destination IP address, as well as protocol type and protocol port
number.
- MAC: MAC ACL mode that filters packets based on the source or
destination MAC address and the Ethernet frame type (RFC 1060).
To Next Page
Loading...
Need help?
General
