D-Link DES-3252P - Web Smart Switch, Инструкция по установке

Страница: 144 / 301

Configuring Device Security
Configuring Network Security
Page 144
–
Unchecked — Maintains the IP based ACLs.
•
Create ACL — Creates an IP based ACL.
•
Create ACE — Creates an IP based ACE.
•
ACE Priority — Indicates the ACE priority that determines which ACE is matched to a packet based on a
first-match basis. The possible field value is 1-2147483647.
•
Protocol — Creates an ACE based on a specific protocol.
•
Flag Set — Sets the indicated TCP flag that can be triggered.
•
ICMP Type — Specifies an ICMP message type for filtering ICMP packets.
•
ICMP Code — Specifies an ICMP message code for filtering ICMP packets. ICMP packets that are filtered by
ICMP message type. It can also be filtered by the ICMP message code.
•
IGMP Type — IGMP packets can be filtered by IGMP message type.
•
IP Address — Matches the source port IP address to which packets are addressed to the ACE.
•
Source Wildcard Mask — Defines the source IP address wildcard mask. Wildcard masks specify which bits
are used and which bits are ignored. A wild card mask of 255.255.255.255 indicates that no bit is important. A
wildcard of 0.0.0.0 indicates that all the bits are important. For example, if the source IP address
149.36.184.198 and the wildcard mask is 255.36.184.00, the first eight bits of the IP address are ignored,
while the last eight bits are used.
•
Destination IP Address — Matches the destination port IP address to which packets are addressed to the
ACE.
•
Wildcard Mask — Defines the destination IP address wildcard mask. Select either Match DSCP or Match IP
Precedence:
•
Source Port — Defines the TCP/UDP source port to which the ACE is matched. This field is active only if
800/6-TCP or 800/17-UDP are selected in the Select from List drop-down menu. The possible field range is 0
- 65535.
•
Destination Port — Defines the TCP/UDP destination port. This field is active only if 800/6-TCP or 800/17-
UDP are selected in the Select from List drop-down menu. The possible field range is 0 - 65535.
•
DSCP — Filters the packets by the DiffServ Code Point (DSCP) value.
•
IP-Prec . — Filters the packets by the IP Precedence.
•
Action — The ACL forwarding action. Possible values are:
–
Permit — Forwards packets which meet the ACL criteria.
–
Deny — Drops packets which meet the ACL criteria.
–
Shutdown — Drops packet that meets the ACL criteria, and disables the port to which the packet was
addressed. Ports are reactivated from the Interface Configuration Page.
•
Remove ACL — Removes the ACLs. The possible fields are:
–
Checked — Removes the selected MAC based ACL.
–
Unchecked — Maintains the MAC based ACLs.
2. Click The Add IP Based ACL Page opens: