Introduction To Ipv4 Acl; Ipv4 Acl Classification; Ipv4 Acl Naming - 3Com 4510G Configuration Manual

Software-based application: An ACL is referenced by a piece of upper layer software. For
example, an ACL can be referenced to configure login user control behavior, thus controlling
Telnet, SNMP and Web users. Note that when an ACL is reference by the upper layer software,
actions to be taken on packets matching the ACL depend on those defined by the ACL rules. For
details about login user control, refer to the part about login configuration in this manual.
When an ACL is assigned to a piece of hardware and referenced by a QoS policy for traffic
classification, the switch does not take action according to the traffic behavior definition on a
packet that does not match the ACL.
When an ACL is referenced by a piece of software to control Telnet, SNMP, and Web login users,
the switch denies all packets that do not match the ACL.

Introduction to IPv4 ACL

This section covers these topics:

IPv4 ACL Classification

IPv4 ACL Naming

IPv4 ACL Match Order
IPv4 ACL Step
Effective Period of an IPv4 ACL
IP Fragments Filtering with IPv4 ACL
IPv4 ACL Classification
IPv4 ACLs, identified by ACL numbers, fall into three categories, as shown in
Table 13-1 IPv4 ACL categories
Category
Basic IPv4 ACL
Advanced IPv4 ACL
Ethernet frame header
ACL
IPv4 ACL Naming
When creating an IPv4 ACL, you can specify a unique name for it. Afterwards, you can identify the ACL
by its name.
An IPv4 ACL can have only one name. Whether to specify a name for an ACL is up to you. After
creating an ACL, you cannot specify a name for it, nor can you change or remove its name.
ACL number
2000 to 2999 Source IP address
Source IP address, destination IP address,
3000 to 3999 protocol carried over IP, and other Layer 3 or
Layer 4 protocol header information
Layer 2 protocol header fields such as source
4000 to 4999 MAC address, destination MAC address, 802.1p
priority, and link layer protocol type
13-2
Table 13-1.
Matching criteria