Supermicro SSE-G2252, Руководство пользователя

Страница: 311 / 1401

Chapter 13: Security Measures
Access Control Lists
– 318 –
•
Source / Destination Bit Mask – Hexadecimal mask for source or
destination MAC address.
•
Packet Format – This attribute includes the following packet types:
•
Any – Any Ethernet packet type.
•
Untagged-eth2 – Untagged Ethernet II packets.
•
Untagged-802.3 – Untagged Ethernet 802.3 packets.
•
Tagged-eth2 – Tagged Ethernet II packets.
•
Tagged-802.3 – Tagged Ethernet 802.3 packets.
•
VID – VLAN ID. (Range: 1-4094)
•
VID Bit Mask – VLAN bit mask. (Range: 0-4095)
•
Ethernet Type – This option can only be used to filter Ethernet II
formatted packets. (Range: 0-ffff hex.)
A detailed listing of Ethernet protocol types can be found in RFC 1060.
A few of the more common types include 0800 (IP), 0806 (ARP), 8137
(IPX).
•
Ethernet Type Bit Mask – Protocol bit mask. (Range: 0-ffff hex.)
•
Internet Protocol – Layer 3 or 4 information to match.
•
No – Not applied.
•
IPv4 – See “Configuring an Extended IPv4 ACL” on page 310 .
•
IPv6 – See “Configuring an Extended IPv6 ACL” on page 314 .
•
CoS – CoS value. (Range: 0-7, where 7 is the highest priority)
•
CoS Bit Mask – CoS bitmask. (Range: 0-7)
•
Time Range – Name of a time range.
W
EB
I
NTERFACE
To add rules to a MAC ACL:
1.
Click Security, ACL.
2.
Select Configure ACL from the Step list.
3.
Select Add Rule from the Action list.
4.
Select MAC from the Type list.
5.
Select the name of an ACL from the Name list.