Netgear GS728TP User Manual download pdf (Page 436)

Managing Device Security

436

ProSafe M5300 Switch

Note: There is an implicit “deny all” rule at the end of an ACL list. This

means that if an ACL is applied to a packet and if none of the explicit

rules match, then the final implicit “deny all” rule applies and the

packet is dropped.

To use the ACL Wizard to configure an ACL:

1. Use ACL Type to specifies the ACL type you are using to create the ACL. You can

select one type from 10 optional types:

• ACL Based on Destination MAC - To create a ACL based on the destination MAC

address, destination MAC mask and VLAN.

• ACL Based on Source MAC - To create a ACL based on the source MAC address,

source MAC mask and VLAN.

• ACL Based on Destination IPv4 - To create a ACL based on the destination IPv4

address and IPv4 address mask.

• ACL Based on Source IPv4 - To create a ACL based on the source IPv4 address

and IPv4 address mask.

• ACL Based on Destination IPv6 - To create a ACL based on the destination IPv6

prefix and IPv6 prefix length.

• ACL Based on Source IPv6 - To create a ACL based on the source IPv6 prefix and

IPv6 prefix length.

• ACL Based on Destination IPv4 L4 Port - To create a ACL based on the destination

IPv4 layer4 port number.

• ACL Based on Source IPv4 L4 Port - To create a ACL based on the source IPv4

layer4 port number.

• ACL Based on Destination IPv6 L4 Port - To create a ACL based on the destination

IPv6 layer4 port number.

• ACL Based on Source IPv6 L4 Port - To create a ACL based on the source IPv6

layer4 port number.

2. Use Rule ID to enter a whole number in the range of 1 to 1023 that will be used to identify

the rule.

3. Use Action to specify what action should be taken if a packet matches the rule's criteria.

The choices are permit or deny.

4. Use Destination MAC to specify the destination MAC address to compare against an

Ethernet frame. Valid format is (xx:xx:xx:xx:xx:xx). The BPDU keyword may be specified

using a Destination MAC address of 01:80:C2:xx:xx:xx.

5. Use Destination MAC Mask to specify the destination MAC address mask specifying which

bits in the destination MAC to compare against an Ethernet frame. Valid format is

(xx:xx:xx:xx:xx:xx). The BPDU keyword may be specified using a Destination MAC mask of

00:00:00:ff:ff:ff.

6. Click ADD to add a new rule to the ACL based on destination MAC.

1 2 ... 431 432 433 434 435 436 437 438 439 440 441 ... 529 530

No comments

Netgear GS728TP User Manual Page 436