Netgear GS728TP User Manual download pdf (Page 444)

Managing Device Security

444

ProSafe M5300 Switch

• Action - Selects the ACL forwarding action, which is one of the following:

• Permit - Forwards packets which meet the ACL criteria.

• Deny - Drops packets which meet the ACL criteria.

• Logging - When set to 'Enable', logging is enabled for this ACL rule (subject to

resource availability in the device). If the Access List Trap Flag is also enabled, this

will cause periodic traps to be generated indicating the number of times this rule was

'hit' during the current report interval. A fixed 5 minute report interval is used for the

entire system. A trap is not issued if the ACL rule hit count is zero for the current

interval. This field is visible for a 'Deny' Action.

• Assign Queue ID - Specifies the hardware egress queue identifier used to handle all

packets matching this ACL rule. Enter an identifying number from 0–6 in the

appropriate field.

• Match Every - Select true or false from the pull-down menu. True signifies that all

packets will match the selected IP ACL and Rule and will be either permitted or

denied. In this case, since all packets match the rule, the option of configuring other

match criteria will not be offered. To configure specific match criteria for the rule,

remove the rule and re-create it, or re-configure 'Match Every' to 'False' for the other

match criteria to be visible.

• Mirror Interface - Specifies the specific egress interface where the matching traffic

stream is copied in addition to being forwarded normally by the device. This field

cannot be set if a Redirect Interface is already configured for the ACL rule. This field

is visible for a 'Permit' Action.

• Redirect Interface - Specifies the specific egress interface where the matching traffic

stream is forced, bypassing any forwarding decision normally performed by the

device. This field cannot be set if a Mirror Interface is already configured for the ACL

rule. This field is visible for a 'Permit' Action.

• Source IP Address - Requires a packet’s source IP address to match the address

listed here. Type an IP Address in the appropriate field using dotted-decimal notation.

The address you enter is compared to a packet's source IP Address.

• Source IP Mask - Specify the IP Mask in dotted-decimal notation to be used with the

Source IP Address value.

• Rate Limit Conform Data Rate - Specify the allowed transmission rate for frames on

the interface

• Rate Limit Burst Size - Specify the number of bytes allowed in a temporary traffic

burst (Burst Rate).

• Time Range - Select the name of the time range that will impose a time limitation on

the ACL rule. If a time range with the specified name does not exist, and the ACL

containing this ACL rule is associated with an interface, the ACL rule is applied

immediately. If a time range with specified name exists, and the ACL containing this

ACL rule is associated with an interface, the ACL rule is applied when the time-range

with specified name becomes active. The ACL rule is removed when the time-range

with specified name becomes inactive.

3. To delete an IP ACL rule, select the check box associated with the rule, and then click

DELETE.

1 2 ... 439 440 441 442 443 444 445 446 447 448 449 ... 529 530

Comments to this Manuals

No comments

Netgear GS728TP User Manual Page 444

Comments to this Manuals

Related products and manuals for Software Netgear GS728TP