Manage Device Security
323
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports
•
Interface
. For a Permit action, use either a mirror interface or a redirect interface:
-
Select the
Mirror Interface
radio button and use the menu to specify the egress
interface to which the matching traffic stream is copied, in addition to being
forwarded normally by the device.
-
Select the
Redirect Interface
radio button and use the menu to specify the
egress interface to which the matching traffic stream is forced, bypassing any
forwarding decision normally performed by the device.
•
Match Every
. From the
Match Every
menu, select whether all packets must match
the selected IP ACL rule:
-
False
. Not all packets need to match the selected IP ACL rule. You can configure
other match criteria on the page.
-
True
. All packets must match the selected IP ACL rule and are either permitted or
denied. In this case, you cannot configure other match criteria on the page.
•
Protocol Type
.
From the menu, select a protocol that a packet’s IP protocol must be
matched against:
IP
,
ICMP
,
IGMP
,
TCP
,
UDP
,
EIGRP
,
GRE
,
IPINIP
,
OSPF
,
PIM
, or
Other
. If you select
Other
, specify enter a protocol number from 0 to 255.
•
Src
. In the
Src
field, enter a source IP address, using dotted-decimal notation, to be
compared to a packet’s source IP address as a match criterion for the selected IP
ACL rule:
-
If you select the
IP Address
radio button, enter an IP address or an IP address
range. You can enter a relevant wildcard mask to apply this criteria. If this field is
left empty, it means
any
.
-
If you select the
Host
radio button, the wildcard mask is configured as 0.0.0.0. If
this field is left empty, it means
any
.
The wildcard mask determines which bits are used and which bits are ignored. A
wildcard mask of 0.0.0.0 indicates that
none
of the bits are important. A wildcard of
255.255.255.255 indicates that
all
of the bits are important.
•
Src L4
. The options are available only when the protocol is set to TCP or UDP. Use the
source L4 port option to specify relevant matching conditions for L4 port numbers in
the extended ACL rule.
You can select either the
Port
radio button or the
Range
radio button:
-
Port radio button
. If you select the
Port
radio button, you can either enter the
port number yourself or select one of the following protocols from the menu:
•
The source IP TCP port protocols are
domain
,
echo
,
ftp
,
ftpdata
,
www-http
,
smtp
,
telnet
,
pop2
,
pop3
, and
bgp
.
•
The source IP UDP port protocols are
domain
,
echo
,
snmp
,
ntp
,
rip
,
time
,
who
, and
tftp
.
Each of these values translates into its equivalent port number, which is used as
both the start and end of the port range.
Select
Other
from the menu to enter a port number. If you select
Other
from the
menu but leave the field blank, it means
any
.
