Hirschmann GREYHOUND GRS1020, Reference Manual

Page: 135 / 619

Network Security
[ Network Security > ACL ]
134
RM GUI GRS
Release 8.0 09/2019
The filter detects ICMP packets whose payload size exceeds the size specified in the
Allowed
payload size [byte]
field and discards them.
Possible values:

marked
The filter is active.

unmarked (default setting)
The filter is inactive.
Allowed payload size [byte]
Specifies the maximum allowed payload size of ICMP packets in bytes.
Mark the Filter by packet size checkbox if you want the device to discard incoming data packets
whose payload size exceeds the maximum allowed size for ICMP packets.
Possible values:

0..1472 (default setting: 512 )
Buttons
You find the description of the standard buttons in section “Buttons” on page 13 .
4.6 ACL
[ Network Security > ACL ]
In this menu, you specify the settings for the Access Control Lists (ACL). Access Control Lists
contain rules which the device applies successively to the data stream on its ports or VLANs.
If a data packet complies with the criteria of one or more rules, then the device applies the action
specified in the first rule that applies to the data stream. The device ignores the rules following.
Possible actions include:

permit : The device transmits the data packet to a port or to a VLAN.

deny : The device drops the data packet.
In the default setting, the device forwards every data packet. Once you assign an Access Control
List to an interface or VLAN, there is changing this behavior. The device enters at the end of an
Access Control List an implicit Deny-All rule. Consequently, the device discards data packets that
do not meet any of the rules. If you want a different behavior, then add a "permit" rule at the end of
your Access Control Lists.
Proceed as follows to set up Access Control Lists and rules:

Make a rule and specify the rule settings. See the Network Security > ACL > IPv4 Rule dialog, or
the Network Security > ACL > MAC Rule dialog.

Assign the Access Control List to the Ports and VLANs of the device. See the Network Security >
ACL > Assignment dialog.