ZyXEL Communications IES-1248-71, User Manual

Page: 231 / 464

IES-1248-71/73 User’s Guide
231
C
H A P T E R
34
ACL
This chapter shows you how to set up ACL profiles on each port.
34.1 Access Control Logic (ACL) Overview
An ACL (Access Control Logic) profile allows the IES-1248 to classify and perform actions
on the upstream traffic. Each ACL profile consists of a rule and an action, and you assign ACL
profiles to PVCs.
34.1.1 ACL Profile Rules
Each ACL profile uses one of 14 rules to classify upstream traffic. These rules are listed below
by rule number.
1. etype <etype> vlan <vid>
2. etype <etype> smac <mac>
3. etype <etype> dmac <mac>
4. vlan <vid> smac <mac>
5. vlan <vid> dmac <mac>
6. smac <mac> dmac <mac>
7. vlan <vid> priority <priority>
8. etype <etype>
9. vlan <vid>
10. smac <mac>
11. dmac <mac>
12. priority <priority>
13. protocol <protocol>
14. {srcip <ip>/<mask>{|dstip <ip>/<mask>{|tos <stos> <etos> {|srcport <sport>
<eport> {|dstport <sport> <eport>}}}}}
The input values for these values have the following ranges.
• <vid>: 1~4094
• <priority>: 1~7
• <etype>: 0~65535
• <protocol>: tcp|udp|ospf|igmp|ip|gre|icmp|<ptype>
• <ptype>: 0~255
• <mask>: 0~32
• <tos>: 0~255
• <port>: 0~65535