TP-Link T1600G-18TS Configuration Manual page 539

Configuring ACL
Operation
2) Configure the rule's packet-matching criteria
DSCP
Flow Label
IPv6 Source IP
S-IP
Mask
IPv6 Destination IP
D-IP
Mask
S-Port / D-Port
3) Click Apply.
 Verifying the Rule Table
The rules in an ACL are listed in ascending order of configuration time, regardless of their
rule IDs. By default, a rule configured earlier is listed before a rule configured later. The
switch matches a received packet with the rules in order. When a packet matches a rule,
the device stops the match process and performs the action defined in the rule.
In the ACL rule table, you can view all the ACLs and their rules. You can also delete an ACL
or an ACL rule, or change the matching order if needed.
Select an operation to be performed when a packet matches the rule.
Permit: To forward the matched packets.
Deny: To discard the matched packets.
Specify a DSCP value to be matched.
Specify a Flow Label value to be matched.
When selected, enter the source IP address with a mask.
Enter the source IPv6 address to be matched. All types of IPv6 address will
be checked. You may enter a complete 128-bit IPv6 address but only the
first 64 bits will be valid.
The mask is required if the source IPv6 address is entered. Enter the mask in
complete format (for example, ffff:ffff:0000:ffff).
The IP address mask specifies which bits in the source IPv6 address to
match the rule. A value of 1 in the mask indicates that the corresponding bit
in the address will be matched.
When selected, enter the destination IPv6 address with a mask.
Enter the destination IPv6 address to be matched. All types of IPv6 address
will be checked. You may enter a complete 128-bit IPv6 address but only the
first 64 bits will be valid.
The mask is required if the destination IPv6 address is entered. Enter the
complete mask (for example, ffff:ffff:0000:ffff).
The IP address mask specifies which bits in the source IP address to match
the rule. A value of 1 in the mask indicates that the corresponding bit in the
address will be matched.
Enter the TCP/UDP source and destination port.
For T1600G-18TS, S-Port / D-Port can not be configured.
.
Configuration Guide
ACL Configurations
516