177
1.877.877.2269
BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 11: ACCESS CONTROL
Filter: Frames matching the ACE are filtered.
Rate Limiter: Indicates the rate limiter number of the ACE. The allowed range is 1 to 16. When Disabled is displayed, the rate limiter
operation is disabled.
Port Redirect: Indicates the port redirect operation of the ACE. Frames matching the ACE are redirected to the port number. The
allowed values are Disabled or a specific port number. When Disabled is displayed, the port redirect operation is disabled.
Mirror: Specify the mirror operation of this port. Frames matching the ACE are mirrored to the destination mirror port. The allowed
values are:
Enabled: Frames received on the port are mirrored.
Disabled: Frames received on the port are not mirrored.
The default value is “Disabled.”
Counter: The counter indicates the number of times the ACE was hit by a frame.
Modification Buttons: You can modify each ACE (Access Control Entry) in the table using the following buttons:
+ : Inserts a new ACE before the current row.
e : Edits the ACE row.
up-arrow: Moves the ACE up the list.
down-arrow : Moves the ACE down the list.
X : Deletes the ACE.
+ : The lowest plus sign adds a new entry at the bottom of the ACE listings.
ACE Configuration
An ACE consists of several parameters. These parameters vary according to the frame type that you select. First select the ingress
port for the ACE, and then select the frame type. Different parameter options are displayed depending on the frame type selected.
A frame that hits this ACE matches the configuration that is defined here.
Ingress Port: Select the ingress port for which this ACE applies.
All: The ACE applies to all ports.
Port n: The ACE applies to this port number, where n is the number of the switch port.
Policy Filter: Specify the policy number filter for this ACE.
Any: No policy filter is specified. (policy filter status is “don’t-care”.)
Specific: If you want to filter a specific policy with this ACE, choose this value. Two fields are used for entering a policy value and
bitmask.
Policy Value: When “Specific” is selected for the policy filter, you can enter a specific policy value. The allowed range is 0 to 255.
Policy Bitmask: When “Specific” is selected for the policy filter, you can enter a specific policy bitmask. The allowed range is 0x0 to
0xff. Notice the usage of bitmask, if the binary bit value is “0”, it means this bit is “don’t-care”. The real matched pattern is [policy_value
& policy_bitmask]. For example, if the policy value is 3 and the policy bitmask is 0x10(bit 0 is “don’t-care” bit), then policy 2 and 3 are
applied to this rule.
Frame Type: Select the frame type for this ACE. These frame types are mutually exclusive.
Any: Any frame can match this ACE.
Ethernet Type: Only Ethernet Type frames can match this ACE. The IEEE 802.3 describes the value of Length/Type Field
specifications to be greater than or equal to 1536 decimal (equal to 0600 hexadecimal).
ARP: Only ARP frames can match this ACE. NOTE: The ARP frames won’t match the ACE with ethernet type.
IPv4: Only IPv4 frames can match this ACE. NOTE: The IPv4 frames won’t match the ACE with ethernet type.
IPv6: Only IPv6 frames can match this ACE. Notice the IPv6 frames won’t match the ACE with Ethernet type.
