i3 International S81, Руководство пользователя

Страница: 152 / 205

151
State The client can either be authenticated or unauthenticated. In the authenticated state, it is
allowed to forward frames on the port and in the unauthenticated state it is blocked. As long as
the backend server hasn't successfully authenticated the client, it is unauthenticated. If an
authentication fails the client will remain in the unauthenticated stated for Hold Time seconds.
Last Authentication Shows the date and time of the last authentication of the client (successful as well as
unsuccessful).
Buttons
Auto-refresh: Check this box to refresh the page automatically. It will do so every 3 seconds.
Refresh: Click to refresh the page.
ACL Status
This section displays the ACL status for different ACL users. Each row displays the ACE that is defined. There will be a
conflict if a specific ACE is not applied to the hardware due to hardware limitations. The maximum number of ACEs is 512 on
each switch.
To Display the ACL status in the web interface:

Click Monitor / Security / Network / ACL Status

Check the Auto-Refresh check box to have the page automatically refresh every 3 seconds.
ACL Status Parameters:
Items Description
User Indicates the ACL user.
Ingress Port Indicates the ingress port of the ACE. Possible values are:
All: The ACE will match any ingress port,
Port: The ACE will match a specific ingress port.
Frame Type Indicates the frame type of the ACE. Possible values are:
Any: The ACE will match any frame type.
Etype: The ACE will match Ethernet Type Frames. Note that an Ether net Type based ACE will
not get matched by IP and ARP Frames.
ARP: The ACE will match ARP/RARP frames.
IPv4: The ACE will match all IPv4 Frames.
IPv4/ICMP: The ACE will match IPv4 frames with ICMP protocol.
IPv4/UDP: The ACE will match IPv4 frames with UDP protocol.
IPv4/TCP: The ACE will match IPv4 Frames with TCP protocol.
IPv4/Other: The ACE will match IPv4 frames which are not ICMP/UDP/TCP.
IPv6: The ACE will match al IPv6 standard frames.
Action Indicates the forwarding action of the ACE.
Permit: Frames matching the ACE may be forwarded and learned.
Deny: Frames matching the ACE are dropped.
Filter: Frames matching the ACE are filtered.
Rate Limiter Indicates the rate limiter number of the ACE. The allowed range is 1 to 16. When Disabled is
displayed, the rate limiter operation is disabled.