Cabletron Systems SSR-ATM29-02, Руководство пользователя, Страница: 195 / 386

CoreWatch User’s Guide 195
Chapter 13
Configuring
Security on the SSR
You configure security on the SSR by defining Access Control Lists (ACLs) for IP and IPX
interfaces, applying those ACLs to interfaces, and setting Layer-2 filters. This chapter
• provides an overview that briefly describes ACLs.
• discusses setting security on IP networks.
• discusses setting security on IPX networks.
• describes applying an ACL to IP or IPX interfaces.
• discusses setting Layer-2 security filters.
• describes modifying the SSR’s security settings.
A Look at ACLs
Access Control Lists (ACLs) allow you to restrict Layer 3 and Layer-4 traffic going
through the router. Each ACL or each list consists of one or more rules describing a
particular type of IP or IPX traffic. An ACL can be simple and consist of only one rule or
complicated with many rules. Each rule tells the router to either permit or deny the packet
that matches the rule’s packet description. For more information on ACLs and rules, refer
to the
SmartSwitch Router User Reference Manual .
After configuring ACLs you will need to apply them to interfaces. You may do so either
while you are creating the interfaces or afterwards. For details on applying an ACL to an
interface while creating the interface, see the chapter that discusses creating the type of
interface (IP or IPX) to which you want to apply the ACL. If you want to apply an ACL
after the interface has been created, see
“Applying ACLs to IP or IPX Interfaces” on page
212 .