ACE C
ONFIGURATION
Ingress Port and Frame Type
Ingress Port - Any port, port identifier, or policy. (Options: Any port,
◆
Port 1-10, Policy 1-8; Default: Any)
Frame Type - The type of frame to match. (Options: Any, Ethernet,
◆
ARP, IPv4; Default: Any)
Filter Criteria Based on Selected Frame Type
Ethernet:
◆
MAC Parameters
SMAC Filter - The type of source MAC address. (Options: Any,
■
Specific - user defined; Default: Any)
DMAC Filter - The type of destination MAC address. (Options: Any,
■
MC - multicast, BC - broadcast, UC - unicast, Specific - user
defined; Default: Any)
Ethernet Type Parameters
EtherType Filter - This option can only be used to filter Ethernet II
■
formatted packets. (Options: Any, Specific (600-ffff hex);
Default: Any)
A detailed listing of Ethernet protocol types can be found in RFC
1060. A few of the more common types include 0800 (IP), 0806
(ARP), 8137 (IPX).
ARP:
◆
MAC Parameters
SMAC Filter - The type of source MAC address. (Options: Any,
■
Specific - user defined; Default: Any)
DMAC Filter - The type of destination MAC address. (Options: Any,
■
MC - multicast, BC - broadcast, UC - unicast; Default: Any)
ARP Parameters
ARP/RARP - Specifies the type of ARP packet. (Options: Any - no
■
ARP/RARP opcode flag is specified, ARP - frame must have ARP/
RARP opcode set to ARP, RARP - frame must have ARP/RARP opcode
set to RARP, Other - frame has unknown ARP/RARP opcode flag;
Default: Any)
Request/Reply - Specifies whether the packet is an ARP request,
■
reply, or either type. (Options: Any - no ARP/RARP opcode flag is
specified, Request - frame must have ARP Request or RARP Request
– 93 –
| Configuring the Switch
C
4
HAPTER
Configuring Security