Fujitsu Siemens Computers PRIMERGY BX, Description

Page: 233 / 674

Main Menu Web-Based Management Interface
Lan Switch and Router Blade
233
6.2.5.1.3. Configuring IP Access Control List Rule Configuration Page
Use these screens to configure the rules for the IP Access Control Lists created using the IP
Access Control List Configuration screen. What is shown on this screen varies depending on
the current step in the rule configuration process. A Standard/Extended IP ACL must first be
selected to configure rules for. The rule identification, and the 'Action' and 'Match Every'
parameters must be specified next. If 'Match Every' is set to false a new screen will then be
presented from which the match criteria can be configured.
Selection Criteria
IP ACL ID
- Use the pulldown menu to select the IP ACL for which to create or update a
rule.
Rule
- Select an existing rule from the pulldown menu, or select 'Create New Rule.' ACL
as well as an option to add a new Rule. New rules cannot be created if the maximum
number of rules has been reached. For each rule, a packet must match all the specified
criteria in order to be true against that rule and for the specified rule action (Permit/Deny)
to take place.
Configurable Data
Rule ID
- Enter a whole number in the range of 1 to 8 that will be used to identify the rule.
An IP ACL may have up to 8 rules.
Action
- Specify what action should be taken if a packet matches the rule's criteria. The
choices are permit or deny.
Assign Queue ID
- Specifies the hardware egress queue identifier used to handle all
packets matching this IP ACL rule. Valid range of Queue Ids is (0 to 6). This field is visible
when 'Permit' is chosen as 'Action'.
Redirect Interface
- Specifies the specific egress interface where the matching traffic
stream is forced, bypassing any forwarding decision normally performed by the device.
This field is visible when 'Permit' is chosen as 'Action'.
Match Every
- Select true or false from the pulldown menu. True signifies that all packets
will match the selected IP ACL and Rule and will be either permitted or denied. In this
case, since all packets match the rule, the option of configuring other match criteria will