i3 International S81 User Manual page 58

Access Control List Configuration Parameters:
Items
Ingress Port
Policy / Bitmask
Frame Type
Action
Rate Limiter
Port Copy
Logging
Shutdown
Counter
Mac Parameter
SMAC Filter
SMAC Value
Description
Indicates the ingress port of the ACE. Possible values are:
Any: The ACE will match any ingress port.
Policy: The ACE will match ingress ports with a specific policy.
Port: The ACE will match a specific ingress port.
Indicates the policy number and bitmask of the ACE.
Indicates the frame type of the ACE. Possible values are:
Any: The ACE will match any frame type.
EType: The ACE will match Ethernet Type frames. Note that an Ethernet Type based ACE will
not get matched by IP and ARP frames.
ARP: The ACE will match ARP/RARP frames.
IPv4: The ACE will match all IPv4 frames.
IPv4/ICMP: The ACE will match IPv4 frames with ICMP protocol.
IPv4/UDP: The ACE will match IPv4 frames with UDP protocol.
IPv4/TCP: The ACE will match IPv4 frames with TCP protocol.
IPv4/Other: The ACE will match IPv4 frames, which are not ICMP/UDP/TCP .
IPv6: The ACE will match all IPv6 standard frames.
Indicates the forwarding action of the ACE.
Permit: Frames matching the ACE may be forwarded and learned.
Deny: Frames matching the ACE are dropped.
Filter: Frames matching the ACE are filtered.
Indicates the rate limiter number of the ACE. The allowed range is 1 to 16. When Disabled is
displayed, the rate limiter operation is disabled.
Indicates the port copy operation of the ACE. Frames matching the ACE are copied to the
port number . The allowed values are Disabled or a specific port number . When Disabled is
displayed, the port copy operation is disabled.
Indicates the logging operation of the ACE. Possible values are:
Enabled: Frames matching the ACE are stored in the System Log.
Disabled: Frames matching the ACE are not logged.
Indicates the port shut down operation of the ACE. Possible values are:
Enabled: If a frame matches the ACE, the ingress port will be disabled.
Disabled: Port shut down is disabled for the ACE.
The counter indicates the number of times the ACE was hit by a frame. U s i n g t h e
modification buttons you can modify each ACE (ACCESS Control Entry) in the table using the
following buttons.
: Inserts a new ACE before the current row. The second identical icon adds a new entry at
the bottom of the ACE Listing.
: Edits the ACE row.
: Moves the ACE up the list.
: Moves the ACE down the list.
:Deletes the ACE.
(Only displayed when the frame type is Ethernet Type or ARP .) Specify the source MAC filter for
this ACE. Any: No SMAC filter is specified. (SMAC filter status is "don't-care"). Specific: If you
want to filter a specific source MAC address with this ACE, choose this value. A field for
entering an SMAC value appears.
When "Specific" is selected for the SMAC filter , you can enter a specific source MAC
address. The legal format is "xx-xx-xx-xx-xx-xx" or "xx.xx.xx.xx.xx.xx" or "xxxxxxxxxxxx" (x
is a hexadecimal digit). A frame that hits this ACE matches this SMAC value.
57