Dell X1000 Series User Manual page 271

FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Dell Astute\User
• Match IP Precedence — Matches the IP-precedence with the
packet IP-precedence value. IP-precedence enables marking
frames that exceed CIR threshold. In a congested network, frames
containing a higher DP value are discarded before frames with a
lower DP value.
– Time Range Name — Check to associate a time range with the ACE.
Select one of the time ranges defined in the
Configuration
– Action — The ACL forwarding action. The following options are
available:
• Permit — Forwards packets that meet the ACL criteria.
• Deny — Drops packets that meet the ACL criteria.
• Shutdown — Drops packet that meet the ACL criteria, and
disables the port to which the packet was addressed.
– Logging of Dropped Packets — Check to activate logging of dropped
packets.
ACL Binding
When an ACL is bound to an interface, all the rules that have been defined
for the ACL are applied to that interface. Whenever an ACL is assigned on a
port or LAG, flows from that ingress or egress interface that do not match the
ACL, are matched to the default rule, which is to Drop unmatched packets.
To change the default action for unmatched packets to an action other than Drop,
do the following:
• Add an additional ACE to the ACL with "Any" in all fields
• Set its action to other than Drop
• Set the priority to the lowest in the ACL.
To bind ACLs to interfaces:
1 Click Network Administration > Security > ACL and ACE > ACL
Binding.
The ports are displayed along with their associated ACLs.
2 In the View By menu, select either ports or LAGs.
3 To bind an ACL click Edit.
D E L L C O N F I D E N T I A L – P R E L I M I N A R Y 8 / 9 / 1 6 - F O R P R O O F O N L Y
Guide\Dell_Astute_Network_Admin_Security.fm
page.
Time Range
Network Administration: Security
271