ZyXEL Communications XGS3600 Series Manual page 63

Parameter description:
Name :

Indicates the name of the ACE. Maximum length of the ACE Name String is 32.
All ASCII printable characters (except double quotation, less-than sign,
greater-than sign) can be used to form the ACE Name.
Ingress Port :

Select the ingress port for which this ACE applies.
All: The ACE applies to all port.
Port n: The ACE applies to this port number, where n is the number of the
switch port.
Policy Filter :

Specify the policy number filter for this ACE.
Any: No policy filter is specified. (policy filter status is "don't-care".)
Specific: If you want to filter a specific policy with this ACE, choose this value.
Two field for entering an policy value and bitmask appears.
Policy Value :

When "Specific" is selected for the policy filter, you can enter a specific policy
value. The allowed range is 0 to 255.
Policy Bitmask :

When "Specific" is selected for the policy filter, you can enter a specific policy
bitmask. The allowed range is 0x0 to 0xff
Frame Type :

Select the frame type for this ACE. These frame types are mutually exclusive.
Any: Any frame can match this ACE.
Ethernet Type: Only Ethernet Type frames can match this ACE. The IEEE
802.3 describes the value of Length/Type Field specifications to be greater than
or equal to 1536 decimal (equal to 0600 hexadecimal).
ARP: Only ARP frames can match this ACE. Notice the ARP frames won't match
the ACE with Ethernet type.
IPv4: Only IPv4 frames can match this ACE. Notice the IPv4 frames won't
match the ACE with Ethernet type.
Action :

Specify the action to take with a frame that hits this ACE.
Permit: The frame that hits this ACE is granted permission for the ACE
operation.
Deny: The frame that hits this ACE is dropped.
Rate Limiter :

Specify the rate limiter in number of base units. The allowed range is 1 to 12.
Disabled indicates that the rate limiter operation is disabled.
Port Redirect :

Frames that hit the ACE are redirected to the port number specified here. The
allowed range is the same as the switch port number range. Disabled indicates
that the port redirect operation is disabled.
Shutdown :

XGS3600 Series User's Guide
56