268
Network Administration: Security
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Dell Astute\User
Guide\Dell_Astute_Network_Admin_Security.fm
D E L L C O N F ID E N T IA L – P R E L IM I N A R Y 8 / 9 /1 6 - FO R PR O O F O N L Y
–
IGMP
— IGMP packets can be filtered by IGMP message type. This
field is available only when IGMP is selected in the
Protocol
field. The
following options are available:
•
Select from List
— Select an IGMP message type from the list.
•
IGMP Type
— Enter the IGMP message type.
•
Any
— Check to use all IGMP message types.
–
Classification
— Select one of the following matching options:
•
Match DSCP(0-63)
— Matches the packet DSCP value to the
ACL.
•
Match IP Precedence(0-7)
— Check to enable matching
IP-precedence with the packet IP-precedence value. IP-precedence
enables marking frames that exceed the CIR threshold. In a
congested network, frames containing a higher DP value are
discarded before frames with a lower DP value. If this field is
checked, enter a value to be matched.
–
Time Range Name
— Check to associate a time range with the ACE.
Select one of the time ranges defined in the
page.
–
Action
— Select the ACL forwarding action. The following options
are available:
•
Permit
— Forward packets which meet the ACL criteria.
•
Deny
— Drop packets which meet the ACL criteria.
•
Shutdown
— Drop packet that meet the ACL criteria, and disable
the port to which the packet was addressed.
–
Logging of Dropped Packets
— Check to activate logging of dropped
packets.
IPv6-Based ACLs
The IPv6 Based ACL Page displays and enables the creation of IPv6 ACLs,
which check pure IPv6-based traffic. IPv6 ACLs do not check IPv6-over-IPv4
or ARP packets.