EtherWAN EX26262, Management Manual

Page: 100 / 326

C
HAPTER
4
| Configuring the Switch
Configuring Security
– 100 –
Figure 31: Network Access Server Configuration
F
ILTERING
T
RAFFIC
WITH
A
CCESS
C
ONTROL
L
ISTS
An Access Control List (ACL) is a sequential list of permit or deny
conditions that apply to IP addresses, MAC addresses, or other more
specific criteria. This switch tests ingress packets against the conditions in
an ACL one by one. A packet will be accepted as soon as it matches a
permit rule, or dropped as soon as it matches a deny rule. If no rules
match, the frame is accepted. Other actions can also be invoked when a
matching packet is found, including rate limiting, copying matching packets
to another port or to the system log, or shutting down a port.
A
SSIGNING
ACL P
OLICIES AND
R
ESPONSES
Use the ACL Port Configuration page to define a port to which matching
frames are copied, enable logging, or shut down a port when a matching
frame is seen. Note that rate limiting (configured with the Rate Limiter
menu, page 102 ) is implemented regardless of whether or not a matching
packet is seen.