EtherWAN EX26262, Management Manual

Page: 102 / 326

C
HAPTER
4
| Configuring the Switch
Configuring Security
– 102 –
W
EB
I
NTERFACE
To configure ACL policies and responses for a port:
1.
Click Advanced Configuration, Security, Network, ACL, Ports.
2.
Assign an ACL policy configured on the ACE Configuration page, specify
the responses to invoke when a matching frame is seen, including the
filter mode, copying matching frames to another port, logging matching
frames, or shutting down the port. Note that the setting for rate limiting
is implemented regardless of whether or not a matching packet is seen.
3.
Repeat the preceding step for each port to which an ACL will be applied.
4.
Click Save.
Figure 32: ACL Port Configuration
C
ONFIGURING
R
ATE
L
IMITERS
Use the ACL Rate Limiter Configuration page to define the rate limits
applied to a port (as configured either through the ACL Ports Configuration
menu ( page 100 ) or the Access Control List Configuration menu
( page 103 ).
P
ATH
Advanced Configuration, Security, Network, ACL, Rate Limiters
P
ARAMETERS
These parameters are displayed:
◆
Rate Limiter ID - Rate limiter identifier. (Range: 0-14; Default: 1)
◆
Rate - The threshold above which packets are dropped. (Options:
0-100 pps, or 0, 100, 2*100, 3*100, ... 1000000 kbps)
Due to an ASIC limitation, the enforced rate limits are slightly less than
the listed options. For example: 1 Kpps translates into an enforced
threshold of 1002.1 pps.
◆
Unit - Unit of measure. (Options: pps or kbps; Default: pps)