EKI-9500 Series User Manual
286
4.7.1.3
Interfaces
Use the Access Control List Interface Summary page to associate one or more ACLs
with one or more interfaces on the device. When an ACL is associated with an inter-
face, traffic on the port is checked against the rules defined within the ACL until a
match is found. If the traffic does not match any rules within an ACL, it is dropped
because of the implicit deny all rule at the end of each ACL.
To access this page, click
QoS
>
Access Control Lists
>
Interfaces
.
Figure 4.312 QoS > Access Control Lists > Interfaces
The following table describes the items in the previous figure.
Time Range Name
The name of the time range that will impose a time limitation on the
ACL rule. If a time range with the specified name does not exist, and
the ACL containing this ACL rule is associated with an interface, the
ACL rule is applied immediately. If a time range with specified name
exists, and the ACL containing this ACL rule is associated with an
interface, the ACL rule is applied when the time-range with specified
name becomes active. The ACL rule is removed when the time-range
with specified name becomes inactive.
Committed Rate /
Burst Size
The allowed transmission rate for packets on the interface (Committed
Rate), and the number of bytes allowed in a temporary traffic burst
(Burst Rate).
Submit
Click
Submit
to save the values.
Cancel
Click
Cancel
to close the window.
Item
Description
Item
Description
Interface
The interface that has an associated ACL.
Direction
Indicates whether the packet is checked against the rules in an ACL
when it is received on an interface (Inbound) or after it has been
received, routed, and is ready to exit an interface (Outbound).
Sequence Number
The order the ACL is applied to traffic on the interface relative to other
ACLs associated with the interface in the same direction. When multi-
ple ACLs are applied to the same interface in the same direction, the
ACL with the lowest sequence number is applied first, and the other
ACLs are applied in ascending numerical order.