
Chapter
3:
Web
Management
Security
‐
Network
‐
DHCP
‐
Relay
Intelinet
48
‐
Port
Gigabit
Ethernet
PoE+
Managed
Switch
User
Manual
|
93
3.1.5.11.3.
Security
‐
Network
‐
ACL
‐
Access
Control
List
This
page
shows
the
Access
Control
List
(ACL),
which
is
made
up
of
the
ACEs
defined
on
this
switch.
Each
row
describes
the
ACE
that
is
defined.
The
maximum
number
of
ACEs
is
512
on
each
switch.
Click
on
the
lowest
plus
sign
to
add
a
new
ACE
to
the
list.
The
reserved
ACEs
used
for
internal
protocol,
cannot
be
edited
or
deleted,
the
order
sequence
cannot
be
changed
and
the
priority
is
highest.
Notice:
the
ACE
won't
apply
to
any
stacking
or
none
existing
port.
Ingress
Port
Indicates
the
ingress
port
of
the
ACE.
Possible
values
are:
All:
The
ACE
will
match
all
ingress
port.
Port:
The
ACE
will
match
a
specific
ingress
port.
Policy
/
Bitmask
Indicates
the
policy
number
and
bitmask
of
the
ACE.
Frame
Type
Indicates
the
frame
type
of
the
ACE.
Possible
values
are:
Any:
The
ACE
will
match
any
frame
type.
EType:
The
ACE
will
match
Ethernet
Type
frames.
Note
that
an
Ethernet
Type
based
ACE
will
not
get
matched
by
IP
and
ARP
frames.
ARP:
The
ACE
will
match
ARP/RARP
frames.
IPv4:
The
ACE
will
match
all
IPv4
frames.
IPv4/ICMP:
The
ACE
will
match
IPv4
frames
with
ICMP
protocol.
IPv4/UDP:
The
ACE
will
match
IPv4
frames
with
UDP
protocol.
IPv4/TCP:
The
ACE
will
match
IPv4
frames
with
TCP
protocol.
IPv4/Other:
The
ACE
will
match
IPv4
frames,
which
are
not
ICMP/UDP/TCP.
IPv6:
The
ACE
will
match
all
IPv6
standard
frames.
Action
Indicates
the
forwarding
action
of
the
ACE.
Permit:
Frames
matching
the
ACE
may
be
forwarded
and
learned.
Deny:
Frames
matching
the
ACE
are
dropped.
Rate
Limiter
Indicates
the
rate
limiter
number
of
the
ACE.
The
allowed
range
is
1
to
16.
When
Disabled
is
displayed,
the
rate
limiter
operation
is
disabled.