280
E
ES4710BD 10 Slots L2/L3/L4 Chassis Switch
There are several sub-sections in this category
:
z
ACL number (100-199)
z
Rule
-
permit or deny
z
Source address type
-
Specified IP address or any randomly allocated IP address
z
Source IP address
z
Reverse network mask
z
Target address type
-
Specified IP address or any randomly allocated IP address
z
Destination IP address
z
Reverse network mask
z
IP precedence
z
TOS
Regarding “ICMP numeric extended ACL”, there are two sub-categories:
z
ICMP type
z
ICMP code
Regarding “IGMP numeric extended ACL”, there is one sub-category:
z
IGMP type
Regarding “TCP numeric extended ACL”, there are three sub-categories:
z
Source port
z
Target port
z
TCP sign
Regarding “UDP numeric extended ACL”, there are two sub-categories:
z
Source port
z
Target port
Regarding “numeric extended ACL for other protocols”, there is one sub-category: Matched
protocol.
z
Matched protocol
-
includes IP, EIGRP, OSPF, IPINIP and Input Protocol manually. If user
selects to input manually, they can just simply key-in the protocol number in the right hand
side of icon.
Example: a user wants to configure the “ Add TCP numeric extended ACL” with the ACL number
of 110, deny the source IP address of 10.0.0.0/24 section, and make the target port is 21. Please refer
the following configurations and then click the icon of “Add”.