230
These parameters are displayed:
◆
User
– Indicates the ACL user (see "Configuring User Privilege Levels" on page 51 for a
list of software modules).
◆
Ingress Port
– Indicates the ingress port to which the ACE applies. Possible values are:
■ Any: The ACE will match any ingress port.
■ Policy: The ACE will match ingress ports with a specific policy.
■ Port: The ACE will match a specific ingress port.
◆
Frame Type
– Indicates the frame type to which the ACE applies.
Possible values are:
■ Any: The ACE will match any frame type.
■ EType: The ACE will match Ethernet Type frames. Note that an Ethernet Type based
ACE will not get matched by IP and ARP frames.
■ ARP: ACE will match ARP/RARP frames.
■ IPv4: ACE will match all IPv4 frames.
■ IPv4/ICMP: ACE will match IPv4 frames with ICMP protocol.
■ IPv4/UDP: ACE will match IPv4 frames with UDP protocol.
■ IPv4/TCP: ACE will match IPv4 frames with TCP protocol.
■ IPv4/Other: ACE will match IPv4 frames, which are not ICMP/UDP or TCP.
◆
Action
– Indicates the forwarding action of the ACE:
■ Permit: Frames matching the ACE may be forwarded and learned.
■ Deny: Frames matching the ACE are dropped.
◆
Rate Limiter
– Indicates the rate limiter number implemented by the ACE. The allowed
range is 1 to 15.
◆
Port Copy
– Indicates the port copy operation implemented by the ACE. Frames matching
the ACE are re-directed to the listed port.
◆
Mirror
– Indicates the port mirror operation implemented by the ACL.
Frames matching the ACE are mirrored to the listed port. (See "Configuring Port Mirroring"
on page 198)
◆
CPU
– Forwards packet that matched the specific ACE to the CPU.
◆
CPU Once
– Forwards first packet that matched the specific ACE to the CPU.
◆
Counter
– The number of times the ACE was matched by a frame.
◆
Conflict
– This field shows “Yes” if a specific ACE is not applied due to hardware
limitations.
Summary of Contents for GEP-1070
Page 80: ...80 authentication from any point within the network...
Page 168: ...168...