LevelOne GEL-2670, User Manual, Page: 242 / 320

C
HAPTER
5
| Monitoring the Switch
Displaying Information About Security Settings
– 242 –
Figure 109: NAS Statistics for Specified Port
D
ISPLAYING
ACL
S
TATUS
Use the ACL Status page to show the status for different security modules
which use ACL filtering, including ingress port, frame type, and forwarding
action. Each row describes a defined ACE (see page 101 ).
P
ATH
Monitor, Security, Network, ACL Status
P
ARAMETERS
These parameters are displayed:
◆
User – Indicates the ACL user (see "Configuring User Privilege Levels"
on page 63 for a list of software modules).
◆
Ingress Port – Indicates the ingress port to which the ACE applies.
Possible values are:
■
Any: The ACE will match any ingress port.
■
Policy: The ACE will match ingress ports with a specific policy.
■
Port: The ACE will match a specific ingress port.
◆
Frame Type – Indicates the frame type to which the ACE applies.
Possible values are:
■
Any: The ACE will match any frame type.
■
EType: The ACE will match Ethernet Type frames. Note that an
Ethernet Type based ACE will not get matched by IP and ARP
frames.
■
ARP: ACE will match ARP/RARP frames.
■
IPv4: ACE will match all IPv4 frames.
■
IPv4/ICMP: ACE will match IPv4 frames with ICMP protocol.
■
IPv4/UDP: ACE will match IPv4 frames with UDP protocol.
■
IPv4/TCP: ACE will match IPv4 frames with TCP protocol.
■
IPv4/Other: ACE will match IPv4 frames, which are not ICMP/UDP
or TCP.
◆
Action – Indicates the forwarding action of the ACE:
■
Permit: Frames matching the ACE may be forwarded and learned.
■
Deny: Frames matching the ACE are dropped.