LevelOne GEL-1061, Руководство пользователя

Страница: 274 / 500

Chapter 12
| Security Measures
Access Control Lists
– 274 –
■
Tagged-802.3 – Tagged Ethernet 802.3 packets.
◆
VID – VLAN ID. (Range: 1-4094)
◆
VID Bit Mask – VLAN bit mask. (Range: 0-4095)
◆
Ethernet Type – This option can only be used to filter Ethernet II formatted
packets. (Range: 0-ffff hex.)
A detailed listing of Ethernet protocol types can be found in RFC 1060. A few of
the more common types include 0800 (IP), 0806 (ARP), 8137 (IPX).
◆
Ethernet Type Bit Mask – Protocol bit mask. (Range: 0-ffff hex)
◆
CoS – CoS value. (Range: 0-7, where 7 is the highest priority)
◆
CoS Bit Mask – CoS bitmask. (Range: 0-7)
◆
Time Range – Name of a time range.
Web Interface
To add rules to a MAC ACL:
1.
Click Security, ACL.
2.
Select Configure ACL from the Step list.
3.
Select Add Rule from the Action list.
4.
Select MAC from the Type list.
5.
Select the name of an ACL from the Name list.
6.
Specify the action (i.e., Permit or Deny).
7.
Select the address type (Any, Host, or MAC).
8.
If you select “Host,” enter a specific address (e.g., 11-22-33-44-55-66). If you
select “MAC,” enter a base address and a hexadecimal bit mask for an address
range.
9.
Set any other required criteria, such as VID, Ethernet type, or packet format.
10.
Click Apply.