Draytek VigorSwitch P1085, Руководство пользователя, Страница: 101 / 267

VigorSwitch P1085 User’s Guide 93
identify which one of ACEs in an ACL is firstly used to match
ingress packets. The switch port bound with an ACL use the
contained ACE rules, start with the one with lower sequence
number to match the packet first.
Action Select the action applied to the packet matched this ACE.
Permit or deny the packets into switch core, or shutdown the
port for stopping further transmission.

Permit

Deny

Shutdown
Protocol Specify the protocol for filtering.

Any – All packets will be filtered.

Select – Choose one of the protocol (e.g., ICMP, IP in IP,
TCP, EGP, IGP…) from the drop down list. Packets passing
through the selected protocol will be filtered.

Define – Specify a type number (0 – 255) for ICMP code.
For example, 0 means “Echo Reply”; 254 means
“RFC3692-style Experiment 2”.
Source IP / Destination IP Specify the source and the destination IPv4 address for
filtering.
Any – All packets will be filtered.
Or, enter the IP address to filter the packets coming from that
address.
Service  Any – All packets will be filtered.
 DSCP – All IP traffic is mapped to queues based on the
DSCP field in the IP header. If traffic is not IP traffic, it is
mapped to the lowest priority queue.

IP Precedence - All IP traffic is mapped to queues based
on the IP Precedence field in the IP header. If traffic is
not IP traffic, it is mapped to the lowest priority queue.
Source Port / Destination
Port
Specify the source and destination port number for filtering
the packets.

Any – All packets will be filtered.
 Single – Only the packets passing through the number
defined here will be filtered.

Range – Only the packets passing through the port range
defined here will be filtered.
ICMP Type

Any – All packets will be filtered.

Select – Choose one of the type (e.g., Destination
Unreachable Echo Reply, MLD Query….) from the drop
down list.
 Define – Specify a type number (0 – 255) for ICMP code.
For example, 0 means “Echo Reply”; 254 means
“RFC3692-style Experiment 2”.
ICMP code Each ICMP type can be defined with different codes. For
example, if you define ICMP Type as “3”, then the available
codes for Type 3 will be 0-15.
Any –
All packets will be filtered.
Or, enter 0 to 255 based on the ICMP type specifed.
Add Click it to create a new binding profile.