FibroLAN Falcon-RX/812/G/A User Manual page 128

Falcon R-Class | User Guide
Unit
4.8.2.9 Access Control List Configuration
This section shows the Access Control List (ACL), which is made up of the ACEs defined on this switch.
Each row describes the ACE that is defined. The maximum number of ACEs is 256 on each switch.
Click on the lowest plus sign to add a new ACE to the list. The reserved ACEs used for internal
protocol, cannot be edited or deleted, the order sequence cannot be changed, and the priority is
highest.
Web GUI: Monitor > Security > Network > ACL > Access Control List
Figure 4-79: Access Control List Configuration
Table 4-75: ACL Configuration Parameters
ACE Indicates the ACE ID.
Ingress Port Indicates the ingress port of the ACE. Possible values are:
•
•
Policy / Bitmask Indicates the policy number and bitmask of the ACE.
Frame Type Indicates the frame type of the ACE. Possible values are:
•
•
•
•
•
•
•
•
•
Action Indicates the forwarding action of the ACE.
•
•
•
Rate Limiter Indicates the rate limiter number of the ACE. The allowed range is 1 to 16.
When Disabled is displayed, the rate limiter operation is disabled.
128
Specify the rate unit. The allowed values are:
•
PPS: packets per second.
•
LBPS: Kbits per second.
All: The ACE will match all ingress port.
Port: The ACE will match a specific ingress port.
Any: The ACE will match any frame type.
EType: The ACE will match Ethernet Type frames. Note that an Ethernet
Type based ACE will not get matched by IP and ARP frames.
ARP: The ACE will match ARP/RARP frames
IPv4: The ACE will match all IPv4 frames.
IPv4/ICMP: The ACE will match IPv4 frames with ICMP protocol.
IPv4/UDP: The ACE will match IPv4 frames with UDP protocol.
IPv4/TCP: The ACE will match IPv4 frames with TCP protocol.
IPv4/Other: The ACE will match IPv4 frames, which are not ICMP/UDP/TCP.
IPv6: The ACE will match all IPv6 standard frames.
Permit: Frames matching the ACE may be forwarded and learned.
Deny: Frames matching the ACE are dropped.
Filter: Frames matching the ACE are filtered.