Linksys WRVS4400N Manual page 69

IP Based ACL
This screen shows a summary of configured IP based Access List. The Access List is used
to restrict traffic going through the Router either from WAN or LAN port. There are two
ways to restrict data traffic. You can block specific types of traffic according to your ACL
definitions. Or you can allow only specific types of traffic according to your ACL
definition. The ACL rules will be read according to its priority. If there is a match for a
packet, the action will be taken and following lower priority rules will not be checked
against this packet.
Note that the higher the number of rules that need to be checked against packets, the
lower the throughput. Use ACL rules with caution.
There are two default rules in the table that cannot be deleted. The first rule will allow all
traffic coming in from LAN port to pass the Router. The second rule will allow all traffic
coming in from WAN port. These two rules have the lowest priority, so without adding
any user defined rules, all the packets can be passed through from both WAN and LAN
sides.
The rule will be enabled when the Enable button is checked, and when Date and Time are
matched. If any of conditions are not met, the rule will not be used to check against
packets.
The following are descriptions on each of the fields in the ACL Table:
Page Selections: You can select specific page of ACL list from the drop-down menu to
be displayed. Or you can navigate them page by page through Previous Page and Next
Page button.
Priority: This defines the order on which rule is checked against first. The smaller
number has higher priority. The default rules will always be checked last.
Enable: This tells the Router if the rule is active or not. You can have rules defined in the
ACL Table but in an inactive state. The administrator can decide on when to enable
specific ACL rules manually.
Action: This defines how the rule is to affect the traffic. It can be either Allow or Deny.
If the rule is matched and the action is Allow, the packet will be forwarded. If the rule is
matched and the action is Deny, the packet will be dropped.
Service: This is the service(s) to which the rule applies.
Source Interface: Select LAN, WAN, or ANY interface.
Source: This is the source IP address, which can be one specific IP address, ANY (all IP
addresses), a range of IP addresses, or a specific IP subnet.
Destination: This is the destination IP address, which can be one specific IP address,
ANY (all IP addresses), a range of IP addresses, or a specific IP subnet.