To get more clearly for these ACL function, see following table.
Default ACL Rule
Actions
Deny
Permit
Queue
Mapping
CoS Marking
Copy Frame
Permit
(a)
(b)
(c)
(d)
(e)
Deny
(f)
(g)
(h)
(i)
(j)
Brief descriptions of the above table:
(a): Permit all frames, but deny frames set in ACL entry.
(b): Permit all frames.
(c): Permit all frames, and to do queue mapping of the transmitting frames.
(d): Permit all frames, and to change CoS value of the transmitting frames.
(e): Permit all frames, and to copy frame which set in ACL entry to a defined GE port.
(f): Deny all frames.
(g): Deny all frames, but permit frames set in ACL entry.
(h): Deny all frames.
(i): Deny all frames.
(j): Deny all frames, but to copy frame which set in ACL entry to a defined GE port.
Case 1: ACL for MAC Address
For MAC address
, it can filter on source MAC address, destination MAC address, or both. When it
filters on both MAC address, packets coincident with both rules will take effect. In other words, it does
not do filter if it only coincident with one rule.
If you want to filter only one directional MAC address, the other MAC address just set to all zero. It
means “don’t care” portion. Besides MAC address, it also supports
and Ether type for filter
additionally. Certain VLAN or Ether type under these MAC address will take effect. If you don’t care
VLAN or Ether type, you can just set to zero values.
Following are examples about the above table:
Case 1: (a)
You can set default ACL Rule of GE port as “Permit”, then to bind a suitable profile with “deny” action
for ACL. It means GE port can pass through all packets but not ACL entry of the profile binding.
Case 1: (b)
This case acts as no ACL function. It means all frames will pass through.
ISW Application Guides
Case 1: ACL for MAC Address
ISW Series Managed Industrial Ethernet Switch Hardware Installation & User Guide
35
