![background image](http://html1.mh-extra.com/html/smc-networks/tigerswitch-1000/tigerswitch-1000_management-manual_1300422121.webp)
A
CCESS
C
ONTROL
L
ISTS
3-73
2. Allow TCP packets from class C addresses 192.168.1.0 to any
destination address when set for destination TCP port 80 (i.e., HTTP).
3. Permit all TCP packets from class C addresses 192.168.1.0 with the
TCP control code set to “SYN.”
Binding a Port to an Access Control List
After configuring the Access Control Lists (ACL), you can bind the ports
that need to filter traffic to the appropriate ACLs. You can assign one IP
access list to any port.
Command Usage
•
Each ACL can have up to 60 rules.
•
This switch supports ACLs for ingress filtering only. However, you can
only bind one IP ACL to any port for ingress filtering. In other words,
only one ACL can be bound to an interface - Ingress IP ACL.
Command Attributes
•
Port
– Fixed port or SFP module. (Range: 1-50)
•
IP
– Specifies the IP ACL to bind to a port.
•
IN
– ACL for ingress packets.
•
ACL Name
– Name of the ACL.
Console(config-ext-acl)#permit 10.7.1.1 255.255.255.0 any
4-116
Console(config-ext-acl)#permit 192.168.1.0 255.255.255.0 any dport 80
Console(config-ext-acl)#permit 192.168.1.0 255.255.255.0 any tcp
control-code 2 2
Console(config-std-acl)#
Summary of Contents for TigerSwitch 1000
Page 2: ......
Page 19: ...CONTENTS xv...
Page 23: ...TABLES xix...
Page 36: ...INTRODUCTION 1 10...
Page 155: ...PORT CONFIGURATION 3 107 Figure 3 50 Displaying Etherlike and RMON Statistics...
Page 222: ...CONFIGURING THE SWITCH 3 174...
Page 417: ...VLAN COMMANDS 4 195 This section describes commands used to configure private VLANs...
Page 466: ...TROUBLESHOOTING B 4...
Page 479: ......