Table of Contents
Advertisement
®
xStack
From / To
Service Type
Action
Option
Apply To
Click the Apply button to accept the changes made.
NOTE: The Switch will use one minimum mask to cover all the terms that user input, however, some extra bits
may also be masked at the same time. To optimize the ACL profile and rules, please use manual
configuration.
Access Profile List
Access profiles allow you to establish criteria to determine whether the Switch will forward packets based on the
information contained in each packet's header.
The Switch supports four Profile Types, Ethernet ACL, IPv4 ACL, IPv6 ACL, and Packet Content ACL.
DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide
This rule can be created to apply to four different categories:
Any – Selecting this option will include any starting category to this rule.
MAC Address – Selecting this option will allow the user to enter a range of MAC
addresses for this rule.
IPv4 Address – Selecting this option will allow the user to enter a range of IPv4 addresses
for this rule.
IPv6 – Selecting this option will allow the user to enter a range of IPv6 addresses for this
rule.
After selecting a subject in the From or To field, the user can select one of the following
services:
Any – Selecting this option will apply this rule to all service types.
ICMP All – Selecting this option will apply this rule to all ICMP traffic used in this rule.
IGMP – Selecting this option will apply this rule to IGMP traffic used in this rule.
TCP All – Selecting this option will apply this rule to all TCP traffic used in this rule.
TCP Source Port – Selecting this option will apply this rule to TCP traffic used in this rule
from the source port only.
TCP Destination Port – Selecting this option will apply this rule to TCP traffic used in this
rule from the destination port only.
UDP All – Selecting this option will apply this rule to all UDP traffic used in this rule.
UDP Source Port – Selecting this option will apply this rule to UDP traffic used in this rule
from the source port only.
UDP Destination Port – Selecting this option will apply this rule to UDP traffic used in this
rule from the destination port only.
VLAN Mask (Name) – Selecting this option will apply this rule to the VLAN name used in
this rule.
Select Permit to specify that the packets that match the access profile are forwarded by
the Switch, according to any additional rule added (see below).
Select Deny to specify that the packets that match the access profile are not forwarded by
the Switch and will be filtered.
Select Mirror to specify that packets that match the access profile are mirrored to a port
defined in the mirror port section. Port Mirroring must be enabled and a target port must
be set.
After selecting the Permit action, the user can select one of the following options:
Change 1p Priority – Here the user can enter the 1p priority value.
Replace DSCP – Here the user can enter the DSCP value.
Replace ToS Precedence – Here the user can enter the ToS Precedence value.
Here the user can select and enter the object that this rule will be applied to.
Ports – Here the user can enter a port number or a port range.
VLAN Name – Here the user can enter the VLAN name.
VLAN ID – Here the user can enter the VID.
238
Advertisement
Table of Contents
