54
Policy Value
When "Specific" is selected for the policy filter, you can enter a specific policy value. The allowed range is
0
to
63
.
Policy Bitmask
When "Specific" is selected for the policy filter, you can enter a specific policy bitmask. The allowed range
is
0x0
to
0x3f
. Notice the usage of bitmask, if the binary bit value is "0", it means this bit is "don't-care". The
real matched pattern is [policy_value & policy_bitmask]. For example, if the policy value is 3 and the policy
bitmask is 0x10(bit 0 is "don't-care" bit), then policy 2 and 3 are applied to this rule.
Frame Type
Select the frame type for this ACE. These frame types are mutually exclusive.
Any
: Any frame can match this ACE.
Ethernet Type
: Only Ethernet Type frames can match this ACE. The IEEE 802.3 describes the value of
Length/Type Field specifications to be greater than or equal to 1536 decimal (equal to 0600 hexadecimal)
and the value should not be equal to 0x800(IPv4), 0x806(ARP) or 0x86DD(IPv6).
ARP
: Only ARP frames can match this ACE. Notice the ARP frames won't match the ACE with ethernet type.
IPv4
: Only IPv4 frames can match this ACE. Notice the IPv4 frames won't match the ACE with ethernet type.
IPv6
: Only IPv6 frames can match this ACE. Notice the IPv6 frames won't match the ACE with Ethernet type.
Action
Specify the action to take with a frame that hits this ACE.
Permit
: The frame that hits this ACE is granted permission for the ACE operation.
Deny
: The frame that hits this ACE is dropped.
Filter
: Frames matching the ACE are filtered.
Rate Limiter
Specify the rate limiter in number of base units. The allowed range is
1
to
16
.
Disabled
indicates that the rate
limiter operation is disabled.
Port Redirect
Frames that hit the ACE are redirected to the port number specified here. The rate limiter will affect these
ports. The allowed range is the same as the switch port number range.
Disabled
indicates that the port
redirect operation is disabled and the specific port number of 'Port Redirect' can't be set when action is
permitted.
Mirror
Specify the mirror operation of this port. Frames matching the ACE are mirrored to the destination mirror
port. The rate limiter will not affect frames on the mirror port. The allowed values are:
Enabled
: Frames received on the port are mirrored.
Disabled
: Frames received on the port are not mirrored.
The default value is "Disabled".
Logging
Specify the logging operation of the ACE. Notice that the logging message doesn't include the 4 bytes CRC
information. The allowed values are:
Enabled
: Frames matching the ACE are stored in the System Log.
Disabled
: Frames matching the ACE are not logged.
Note: The logging feature only works when the packet length is less than 1518(without VLAN tags) and the
System Log memory size and logging rate is limited.
Shutdown
Specify the port shut down operation of the ACE. The allowed values are:
Enabled
: If a frame matches the ACE, the ingress port will be disabled.
