Black Box LGB6026A, Management Manual

Page: 302 / 1289

C
HAPTER
14 | Security Measures
Access Control Lists
– 300 –
C
OMMAND
U
SAGE
The following restrictions apply to ACLs:
◆
The maximum number of ACLs is 32.
◆
The maximum number of rules per ACL is also 32.
◆
The maximum number of rules that can be bound to the ports is 96 for
each of the following list types: MAC ACLs, IP ACLs (including Standard
and Extended ACLs), IPv6 Standard ACLs, and IPv6 Extended ACLs. For
the EC-S4626F, all ports share this quota. For the EC-S4650F, ports
1-24 share a quota of 96 rules, and ports 25-50 share another quota of
96 rules (since there are two switch chips in this system).
The order in which active ACLs are checked is as follows:
1. User-defined rules in IP and MAC ACLs for ingress ports are checked in
parallel.
2.
Rules within an ACL are checked in the configured order, from top to
bottom.
3.
If the result of checking an IP ACL is to permit a packet, but the result
of a MAC ACL on the same packet is to deny it, the packet will be
denied (because the decision to deny a packet has a higher priority for
security reasons). A packet will also be denied if the IP ACL denies it
and the MAC ACL accepts it.
S
ETTING
A T
IME
R
ANGE
Use the Security > ACL (Configure Time Range) page to sets a time range
during which ACL functions are applied.
CLI R
EFERENCES
◆
"Time Range" on page 667
P
ARAMETERS
These parameters are displayed in the web interface:
Add
◆
Time-Range Name – Name of a time range. (Range: 1-30 characters)
Add Rule
◆
Time-Range – Name of a time range.
◆
Mode
■
Absolute – Specifies a specific time or time range.
■
Start / End – Specifies the hours, minutes, month, day, and year
at which to start or end.