
100
◆
Action
– Permits or denies a frame based on whether it matches an ACL rule. (Default:
Permit)
◆
Rate Limiter
– Specifies a rate limiter (page 91) to apply to the port. (Range: 1-16; Default:
Disabled)
◆
Port Copy
– Defines a port to which matching frames are copied. (Range: 1-10; Default:
Disabled)
◆
Mirror
– Mirrors matching frames from this port. (Default: Disabled) See "Configuring Port
Mirroring" on page 198.
ACL-based port mirroring set by this parameter and port mirroring set on the general Mirror
Configuration page are implemented independently. To use ACL-based mirroring, enable the
Mirror parameter on the ACE Configuration page. Then open the Mirror Configuration page,
set the “Port to mirror on” field to the required destination port, and leave the “Mode” field
Disabled.
◆
Logging
– Enables logging of matching frames to the system log. (Default: Disabled)
Open the System Log Information menu to view any entries stored in the system log for this
entry. Related entries will be displayed under the “Info” or “All” logging levels.
◆
Shutdown
– Shuts down a port when a macthing frame is seen. (Default: Disabled)
◆
Counter
– Shows he number of frames which have matched any of the rules defined for
this ACL.
VLAN Parameters
◆
802.1Q Tagged
– Specifies whether or not frames should be 802.1Q tagged. (Options:
Any, Disabled, Enabled; Default: Any)
◆
VLAN ID Filter
– Specifies the VLAN to filter for this rule. (Options: Any, Specific (1-4095);
Default: Any)
◆
Tag Priority
– Specifies the User Priority value found in the VLAN tag (3 bits as defined
by IEEE 802.1p) to match for this rule. (Options: Any, Specific (0-7); Default: Any)
WEB INTERFACE
To configure an Access Control List for a port or a policy:
1. Click Configuration, Security, Network, ACL, Access Control List.
2. Click the button to add a new ACL, or use the other ACL modification buttons to specify
the editing action (i.e., edit, delete, or moving the relative position of entry in the list).
3. When editing an entry on the ACE Configuration page, note that the items displayed
depend on various selections, such as Frame Type and IP Protocol Type. Specify the
relevant criteria to be matched for this rule, and set the actions to take when a rule is
matched (such as Rate Limiter, Port Copy, Logging, and Shutdown).
4. Click Save.
Summary of Contents for GEP-1070
Page 80: ...80 authentication from any point within the network...
Page 168: ...168...