Comnet CWGE24MODMS, Инструкция по установке и эксплуатации

Страница: 74 / 106

68
7.7.4 ACL
An ACL is a sequential list of permit or deny conditions that apply to IP addresses. This
switch tests ingress or egress packets against the conditions in an ACL one by one. A
packet will be accepted as soon as it matches a permit rule, or dropped as soon as it
matches a deny rule. If no rules match for a list of all permit rules, the packet is dropped; and
if no rules matches for a list of all deny rules, the packet is accepted.
The following restrictions apply to ACLs:

The ACL only support single port and not support trunk group.

The maximum number of ACLs is also 5 for each port.
Command Attributes

Enable:
An ACL can be enabled per port.

Default Action:
The action if no rules matched.

Action:
An ACL can be permit or deny rule.

IP Address and Prefix Length:
Include destination and source IP address.
Ex: source 192.168.10.1/24 means all frames that source IP address is 192.168.10.x
matched.
Access Control Configuration Interface