Manufacture Corporation 94-1518PF, Руководство пользователя

Страница: 257 / 280

248
Chapter 14 Access Control
14-1 Access Control List
The section describes how to configure Access Control List rule. An Access Control List (ACL) is
a sequential list of permit or deny conditions that apply to IP addresses, MAC addresses, or
other more specific criteria. This switch tests ingress packets against the conditions in an ACL
one by one. A packet will be accepted as soon as it matches a permit rule, or dropped as soon
as it matches a deny rule. If no rules match, the frame is accepted. Other actions can also be
invoked when a matching packet is found, including rate limiting, copying matching packets to
another port or to the system log, or shutting down a port.
This page shows the Access Control List (ACL), which is made up of the ACEs defined on this
switch. Each row describes the ACE that is defined. The maximum number of ACEs is 256 on
each switch. Click on the lowest plus sign to add a new ACE to the list. The reserved ACEs used
for internal protocol, cannot be edited or deleted, the order sequence cannot be changed the
priority is highest.
Web Interface
To configure Access Control List in the web interface:
1. Click Access Control and Access Control List.
2. Click the button to add a new ACL, or use the other ACL.
3. modification buttons to specify the editing action (i.e., edit, delete, or moving the relative
position of entry in the list).
4. To specific the parameter of the ACE.
5. Click Apply.
6. If you want to cancel the setting then you need to click the reset button. It will revert to
previously saved values.
7. When editing an entry on the ACE Configuration page, note that the Items displayed
depend on various selections, such as Frame Type and IP Protocol Type. Specify the
relevant criteria to be matched for this rule, and set the actions to take when a rule is
matched.