Edge-Core ECS4810-12M Layer 2, Руководство по управлению

Страница: 328 / 1236

C
HAPTER
14
| Security Measures
Access Control Lists
– 328 –
C
ONFIGURING A
S
TANDARD
IP
V
4 ACL
Use the Security > ACL (Configure ACL - Add Rule - IP Standard) page to
configure a Standard IPv4 ACL.
CLI R
EFERENCES
◆
"permit, deny (Standard IP ACL)" on page 795
◆
"show ip access-list" on page 799
◆
"Time Range" on page 648
P
ARAMETERS
These parameters are displayed:
◆
Type – Selects the type of ACLs to show in the Name list.
◆
Name – Shows the names of ACLs matching the selected type.
◆
Action – An ACL can contain any combination of permit or deny rules.
◆
Address Type – Specifies the source IP address. Use “Any” to include
all possible addresses, “Host” to specify a specific host address in the
Address field, or “IP” to specify a range of addresses with the Address
and Subnet Mask fields. (Options: Any, Host, IP; Default: Any)
◆
Source IP Address – Source IP address.
◆
Source Subnet Mask – A subnet mask containing four integers from 0
to 255, each separated by a period. The mask uses 1 bits to indicate
“match” and 0 bits to indicate “ignore.” The mask is bitwise ANDed with
the specified source IP address, and compared with the address for
each IP packet entering the port(s) to which this ACL has been
assigned.
◆
Time Range – Name of a time range.
W
EB
I
NTERFACE
To add rules to a Standard IPv4 ACL:
1.
Click Security, ACL.
2.
Select Configure ACL from the Step list.
3.
Select Add Rule from the Action list.
4.
Select IP Standard from the Type list.
5.
Select the name of an ACL from the Name list.
6.
Specify the action (i.e., Permit or Deny).
7.
Select the address type (Any, Host, or IP).
8.
If you select “Host,” enter a specific address. If you select “IP,” enter a
subnet address and the mask for an address range.