TP-Link T2500G-10MPS, Руководство пользователя

Страница: 561 / 804

Configuring ACL ACL Configuration
Configuration Guide 537
1) Select an Extend-IP ACL ID from the drop-down list, enter a Rule ID, then specify the operation for the
matched packets.
ACL ID
Select a
Extend-IP ACL
ACL from the drop-down list.
Rule ID Enter an ID number to identify the rule.
It should not be the same as any existing
Extend-IP ACL
ACL Rule IDs.
Operation Select an action to be taken when a packet matches the rule.
Permit : To forward the matched packets.
Deny : To discard the matched packets.
2) Define the rule’s packet-matching criteria.
S-IP/Mask Specify the source IP address with a mask. A value of 1 in the mask indicates
that the corresponding bit in the address will be matched.
D-IP/Mask Specify the destination IP address with a mask. A value of 1 in the mask
indicates that the corresponding bit in the address will be matched.
IP Protocol Select a protocol type from the drop-down list. The default is All, which
indicates that packets of all protocols will be matched.
TCP Flag If TCP protocol is selected, you can configure the TCP Flag to be used for the
rule’s matching operations. There are six flags and each has three options,
which are *, 0 and 1. The default is *, which indicates that the flag is not used
for matching operations.
URG : Urgent flag.
ACK : Acknowledge flag
PSH : Push flag.
RST : Reset flag.
SYN : Synchronize flag.
FIN : Finish flag
S-Port / D-Port Enter the TCP/UDP source and destination port if TCP/UDP protocol is
selected. The port number ranges from 0 to 65535.
DSCP Specify a DSCP value to be matched between 0 and 63. The default is No
Limit.
IP ToS Specify an IP ToS value to be matched between 0 and 15. The default is No
Limit.
IP Pre Specify an IP Precedence value to be matched to be matched between 0 and
7. The default is No Limit.
3) (Optional) Select a time-range from the drop-down list.
Time-Range Select a time-range during which the rule will take effect. The default value is
No Limit, which means the rule is always in effect.