Zte ZXR10 2918E User Manual

ZXR102900ESeriesCongurationGuide
4.12ACLConguration
ACLOverview
AnAccessControlList(ACL)isasequentialcollectionofpermitanddenyconditionsthat
applytopackets.Whenapacketisreceivedonaninterface,theswitchcomparesthe
eldsinthepacketagainstanyappliedACL’stoverifythatthepackethastherequired
permissionstobeforwarded,basedonthecriteriaspeciedintheaccesslists.Ittests
packetsagainsttheconditionsinanaccesslistonebyone.Therstmatchdetermines
whethertheswitchacceptsorrejectsthepacketsbecausetheswitchstopstesting
conditionsaftertherstmatch.Theorderofconditionsinthelistiscritical.Ifnoconditions
match,theswitchrejectsthepackets.Iftherearenorestrictions,theswitchforwardsthe
packet.otherwise,theswitchdropsthepacket.
TheZXR102900Esupportsthefollowingfunctions.
lTheZXR102900EprovidestwobindingtypesincludingphysicalportandVLANport.
lACLrulecanbeadded,deleted,sorted.
1.RulecanbeaddedtoaconguredACL.RegularIDnumberrangeis1-500.
2.ConguredACLcanbedeletedregularly.IfthespeciedACLinstancenumber
orrulenumberhasn’tbeencongured,afalsemessagewillreturn.
3.ManyrulesofanACLcanbesortedandonlyneedtospecifytheplacewhererule
numberneedtobemoved.
lAnACLcanbecomevalidaccordingtoconguredtimerange.Afterconguring
absoluteorrelativetimerangeontheswitch,timerangecanbeappliedtotheruleof
ACL.Thiscausestheruletobevalidaccordingtothetimerangespecication.
lTheZXR102900EprovidesthefollowingvetypesofACLs:
1.BasicACL:OnlymatchsourceIPaddress.
2.ExtendedACL:MatchsourceIPaddress,destinationIPaddress,IPprotocoltype,
TCPsourceportnumber,TCPdestinationportnumber,UDPsourceportnumber,
UDPdestinationportnumber,ICMPtype,ICMPCodeandDiffServCodePoint
(DSCP).
3.L2ingressACL:MatchsourceMACaddress,destinationMACaddress,source
VLANIDand802.1ppriorityvalue,EthernetnetworktypeandDSAP/SSAP .
4.HybridingressACL:MatchSourceIPv4/IPv6address,destinationIPv4/IPv6
address,IPprotocoltype,TCPsourceportnumber,TCPdestinationportnumber,
UDPsourceportnumber,UDPdestinationportnumber,DiffServCodePoint
(DSCP),sourceMACaddress,destinationMACaddress,sourceVLANIDand
802.1ppriorityvalue.
5.GlobalACL:MatchSourceIPaddress,destinationIPaddress,IPprotocoltype,
TCPsourceportnumber,TCPdestinationportnumber,UDPsourceportnumber,
UDPdestinationportnumber,DiffServCodePoint(DSCP),sourceMACaddress,
destinationMACaddress,sourceVLANIDand802.1ppriorityvalue.
6.BasicegressACL:OnlymatchsourceIPaddress.
7.ExtendedegressACL:MatchsourceIPaddress,destinationIPaddress,IP
protocoltype,TCPsourceportnumber,TCPdestinationportnumber,UDP
4-42
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential

Zte ZXR10 2918E Specifications

General

Brand	Zte
Model	ZXR10 2918E
Category	Switch
Language	English