Falcon R-Class | User Guide
128
Unit
Specify the rate unit. The allowed values are:
•
PPS
: packets per second.
•
LBPS
: Kbits per second.
4.8.2.9
Access Control List Configuration
This section shows the Access Control List (
), which is made up of the ACEs defined on this switch.
Each row describes the ACE that is defined. The maximum number of ACEs is
256
on each switch
.
Click on the lowest plus sign to add a new ACE to the list.
The reserved ACEs used for internal
protocol, cannot be edited or deleted, the order sequence cannot be changed, and the priority is
highest.
Web GUI: Monitor > Security > Network > ACL > Access Control List
Figure 4-79: Access Control List Configuration
Table 4-75: ACL Configuration Parameters
ACE
Indicates the ACE ID.
Ingress Port
Indicates the ingress port of the ACE. Possible values are:
•
All
: The ACE will match all ingress port.
•
Port
: The ACE will match a specific ingress port.
Policy / Bitmask
Indicates the policy number and bitmask of the ACE.
Frame Type
Indicates the frame type of the ACE. Possible values are:
•
Any
: The ACE will match any frame type.
•
EType:
The ACE will match Ethernet Type frames. Note that an Ethernet
Type based ACE will not get matched by IP and ARP frames.
•
: The ACE will match ARP/RARP frames
•
IPv4:
The ACE will match all IPv4 frames.
•
IPv4/ICMP
: The ACE will match IPv4 frames with ICMP protocol.
•
IPv4/UDP:
The ACE will match IPv4 frames with UDP protocol.
•
IPv4/TCP:
The ACE will match IPv4 frames with TCP protocol.
•
IPv4/Other
: The ACE will match IPv4 frames, which are not ICMP/UDP/TCP
.
•
IPv6:
The ACE will match all IPv6 standard frames.
Action
Indicates the forwarding action of the ACE.
•
Permit
: Frames matching the ACE may be forwarded and learned.
•
Deny
: Frames matching the ACE are dropped
.
•
Filter
: Frames matching the ACE are filtered.
Rate Limiter
Indicates the rate limiter number of the ACE. The allowed range is
1
to
16
.
When
Disabled
is displayed, the rate limiter operation is disabled.
