Table of Contents
Advertisement
◆
Source/Destination Bit Mask – Hexadecimal mask for source or destination
MAC address.
◆
Packet Format – This attribute includes the following packet types:
Any – Any Ethernet packet type.
■
Untagged-eth2 – Untagged Ethernet II packets.
■
Untagged-802.3 – Untagged Ethernet 802.3 packets.
■
Tagged-eth2 – Tagged Ethernet II packets.
■
■
Tagged-802.3 – Tagged Ethernet 802.3 packets.
◆
VID – VLAN ID. (Range: 1-4094)
◆
VID Bit Mask – VLAN bit mask. (Range: 0-4095)
◆
Ethernet Type – This option can only be used to filter Ethernet II formatted
packets. (Range: 600-ffff hex.)
A detailed listing of Ethernet protocol types can be found in RFC 1060. A few of
the more common types include 0800 (IP), 0806 (ARP), 8137 (IPX).
◆
Ethernet Type Bit Mask – Protocol bit mask. (Range: 600-ffff hex)
◆
Time Range – Name of a time range.
Web Interface
To add rules to a MAC ACL:
1.
Click Security, ACL.
2.
Select Configure ACL from the Step list.
3.
Select Add Rule from the Action list.
4.
Select MAC from the Type list.
5.
Select the name of an ACL from the Name list.
6.
Specify the action (i.e., Permit or Deny).
7.
Select the address type (Any, Host, or MAC).
8.
If you select "Host, " enter a specific address (e.g., 11-22-33-44-55-66). If you
select "MAC, " enter a base address and a hexadecimal bit mask for an address
range.
9.
Set any other required criteria, such as VID, Ethernet type, or packet format.
10.
Click Apply.
– 303 –
Chapter 12
| Security Measures
Access Control Lists
Advertisement
Chapters
Table of Contents
