Allworx PowerFlex P810, Руководство пользователя

Страница: 221 / 236

PowerFlex
8/24/48 Port GbE PoE Managed Switch User’s Guide
7 Glossary of Web-based Management
Term Definition
A
ACE
An acronym for Access Control Entry describing access permission
associated with a particular ACE ID.
The three ACE frame types are Ethernet Type, ARP, and IPv4, and two ACE
actions permit and deny. The ACE also contains many detailed, different
parameter options available for individual application.
ACL
An acronym for Access Control List. It is the list table of ACEs, containing
access control entries that specify individual users or groups permitted or
denied to specific traffic objects, such as a process or a program.
Each accessible traffic object contains an identifier to its ACL. The privileges
determine whether there are specific traffic object access rights.
ACL implementations can be complex, for example, when prioritizing the
ACEs for the various situation. In networking, the ACL refers to a list of
service ports or network services available on a host or server, each with a list
of hosts or servers permitted or denied to use the service. ACL can generally
be configured to control inbound traffic, and in this context, similar to firewalls.
There are 3 web-pages associated with the manual ACL configuration:
ACL|Access Control List: The web page shows the ACEs prioritized, highest
(top) to lowest (bottom). The default table is empty. An ingress frame only
gets hit on one ACE even though there are more matching ACEs. The first
matching ACE takes action (permit/deny) on that frame and an associated
counter increments. An ACE associations include Policy, 1 ingress port, or
any ingress port (the whole switch). If creating an ACE Policy, then associate
that Policy with a group of ports under the "Ports" web-page. There are
number of parameters to configure with an ACE. Read the Web page help
text for further information for each. The maximum number of ACEs is 64.
ACL|Ports: Use the ACL Ports configuration to assign a Policy ID to an
ingress port. This is useful to group ports to obey the same traffic rules.
Create the Traffic Policy under the "Access Control List" - page. Users can
also set up specific traffic properties (Action / Rate Limiter / Port copy, etc) for
each ingress port. Each only applies if the frame gets past the ACE matching
without getting matched. In that case a counter associated with that port
increments. See the Web page help text for each specific port property.
ACL|Rate Limiters: Under this page configure the rate limiters. There can be
15 diffe rent rate limiters, each ranging from 1-1024K packets per second.
Under "Ports" and "Access Control List" web-pages users can assign a Rate
Limiter ID to the ACE(s) or ingress port(s).
AES
An acronym for Advanced Encryption Standard. The encryption key protocol
is applied in 802.1i standard to improve WLAN security. It is an encryption
standard by the U.S. government, which will replace DES and 3DES. AES
has a fixed block size of 128 bits and a key size of 128, 192, or 256 bits.
APS
An acronym for Automatic Protection Switching. Use this protocol to secure
bidirectional switching in the two ends of a protection group, defined in
G.8031.
Toll Free 1-866- ALLWORX • 585 -421- 3850 • www.allworx.com
Revised: October 30, 2013
Page 213