User’s Manual of WGSW-20160HP
4.10.2 Access Control List Configuration
This Page shows the Access Control List (ACL), which is made up of the ACEs defined on this switch. Each row describes the
ACE that is defined. The maximum number of ACEs is
256
on each switch.
Click on the lowest plus sign to add a new ACE to the list. The reserved ACEs used for internal protocol, cannot be edited or
deleted, the order sequence cannot be changed and the priority is highest.
The Access Control List Configuration screen in
Figure 4-10-2
appears.
Figure 4-10-2:
Access Control List Configuration Page Screenshot
The Page includes the following fields:
Object
Description
Indicates the ingress port of the ACE. Possible values are:
All
: The ACE will match all ingress port.
Port
: The ACE will match a specific ingress port.
Ingress Port
Indicates the policy number and bitmask of the ACE.
Policy / Bitmask
Indicates the frame type of the ACE. Possible values are:
Any
: The ACE will match any frame type.
EType
: The ACE will match Ethernet Type frames. Note that an Ethernet Type
based ACE will not get matched by IP and ARP frames.
ARP
: The ACE will match ARP/RARP frames.
IPv4
: The ACE will match all IPv4 frames.
IPv4/ICMP
: The ACE will match IPv4 frames with ICMP protocol.
IPv4/UDP
: The ACE will match IPv4 frames with UDP protocol.
IPv4/TCP
: The ACE will match IPv4 frames with TCP protocol.
IPv4/Other
: The ACE will match IPv4 frames, which are not ICMP/UDP/TCP.
IPv6
: The ACE will match all IPv6 standard frames.
Frame Type
Indicates the forwarding action of the ACE.
Permit
: Frames matching the ACE may be forwarded and learned.
Deny
: Frames matching the ACE are dropped.
Action
Indicates the rate limiter number of the ACE. The allowed range is 1 to 16. When
Disabled is displayed, the rate limiter operation is disabled.
Rate Limiter
Port Redirect
Indicates the port redirect operation of the ACE. Frames matching the ACE are
redirected to the port number. The allowed values are
Disabled
or a specific port
number. When
Disabled
is displayed, the port redirect operation is disabled.
211