AT-8100 Series Version 2.2.5.0 Web Interface User’s Guide
233
Source and destination UDP ports
VLAN IDs
IPv4 Address and
Mask
The mask of an IPv4 address is a decimal number that represents
the number of bits in the address, from left to right, that constitute the
network portion of the address. For example, the subnet address
149.11.11.0/24 has a mask of “24” for first the twenty-four bits of the
network portion of the address. The IP address and the mask are
separated by a slash (/); for example, “149.11.11.0/24.”
Actions
The action defines the response to packets that match the filtering criterion
of the ACL. There are three actions for ACLs:
Deny
— A deny action instructs ports to discard the specified ingress
packets.
Permit
— A permit action instructs ports to forward ingress packets that
match the specified traffic flow of the ACL. By default, all ingress
packets are forwarded by the ports.
Copy to mirror
— This action causes a port to copy all ingress packets
that match the ACL to the destination port of the mirror port.
How Ingress
Packets are
Compared
Against ACLs
Ports that do not have an ACL forward
all
ingress packets. Ports with one
or more deny ACLs discard ingress packets that match the ACLs and
forward all other traffic. A port that has one deny ACL that specifies a
particular source IP address, for example, discards all ingress packets
with the specified source address and forwards all other traffic. In
situations where a port has more than one deny ACL, packets are
discarded at the first match.
Since ports forward all ingress packets unless they have deny ACLs,
permit ACLs are only necessary in situations where you want a port to
forward packets that are a subset of a larger traffic flow that is blocked: for
example, a port that forwards only packets having a specified destination
IP address. A permit ACL specifies the packets with the intended
destination IP address, and a deny ACL specifies all traffic.
When ports have both permit and deny ACLs, you must add the permit
ACLs first, because packets are compared against the ACLs in the order
they are added to the ports. If a permit ACL is added after a deny ACL,
ports are likely to discard packets specified by the permit ACL, thus
causing them to block packets you want them to forward.
Содержание AT-8100L/8POE
Страница 4: ......
Страница 10: ...Contents 10...
Страница 14: ...Figures 14...
Страница 22: ...Chapter 1 AT 8100 Series Version 2 2 5 0 Web Browser Interface 22...
Страница 84: ...Chapter 5 Setting Port Statistics 84...
Страница 90: ...Chapter 6 Port Mirroring 90 6 Click Apply 7 Click SAVE to save your changes to the startup configuration file...
Страница 92: ...Chapter 6 Port Mirroring 92...
Страница 100: ...Chapter 7 Spanning Tree Protocol on a Port 100...
Страница 120: ...Chapter 9 Link Aggregation Control Protocol LACP 120...
Страница 130: ...Chapter 10 Setting Static Port Trunks 130...
Страница 148: ...Chapter 12 Spanning Tree Protocols on the Switch 148...
Страница 158: ...Chapter 13 Internet Group Management Protocol IGMP Snooping 158...
Страница 168: ...Chapter 14 IGMP Snooping Querier 168...
Страница 178: ...Chapter 15 Power Over Ethernet PoE 178...
Страница 230: ...Chapter 19 Setting IPv4 and IPv6 Addresses 230...
Страница 242: ...Chapter 20 Access Control Lists ACL 242...
Страница 246: ...Chapter 21 Setting Static Routes 246 8 Click Apply 9 Click SAVE...
Страница 250: ...Chapter 21 Setting Static Routes 250...
Страница 319: ...AT 8100 Series Version 2 2 5 0 Web Interface User s Guide 319 Model Name Asset ID...
Страница 320: ...Chapter 25 LLDP and LLDP MED 320...