173
No.
This field displays a sequential number for each MAC address filter.
MAC Address
This field displays the source MAC address in the MAC address filter.
VLAN
This field displays the source VLAN ID in the MAC address filter.
Port
This field displays the source port of the discarded ARP packet.
Expiry (min)
This field displays how long (in minutes) the MAC address filter
remains in the Switch.
Action
Click
Delete
to remove the record manually.
Total
This field displays the current number of MAC address filters that were
created because the Switch identified unauthorized ARP packets.
7.2.
ACL
7.2.1.
Introduction
L2 Access control list
(
ACL
) is a list of permissions attached to an object. The list specifies who
or what is allowed to access the object and what operations are allowed to be performed on the
object.
L2 ACL function allows user to configure a few rules to reject packets from the specific ingress
ports or all ports. These rules will check the packets’ source MAC address and destination MAC
address. If packets match these rules, the system will do the actions “deny”. “deny” means
rejecting these packets.
The Action Resolution engine collects the information (action and metering results) from the hit
entries: if more than one rule matches, the actions and meter/counters are taken from the policy
associated with the matched rule with highest priority.
L2 ACL Support:
1. Filter a specific source MAC address.
Command:
source mac host MACADDR
2. Filter a specific destination MAC address.
Command:
destination mac host MACADDR
3. Filter a range of source MAC address.
Command:
source mac MACADDR MACADDR
The second MACADDR is a mask, for example: ffff.ffff.0000
4. Filter a range of destination MAC address.
Command:
destination mac MACADDR MACADDR
The second MACADDR is a mask, for example: ffff.ffff.0000
L3 ACL Support:
1. Filter a specific source IP address.
Command:
source ip host IPADDR
2. Filter a specific destination IP address.
