NETGEAR S3600 Series User Manual page 571

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
This means that not all packets need to match the ACL rule that permits the
packets. You can configure additional criteria to refine the rule.
f. From the EtherType Key menu, select IPV4.
This means that the criteria apply to IPv4 traffic only.
g. In the Source Mask field, type 01:02:1A:BC:DE:EF and in the Source MAC
Mask field, type 00:00:00:00:FF:FF.
This information identifies the computer in the Sales department.
h. In the VLAN field, type 2.
This means that the ACL applies to traffic on the VLAN with ID 2. (This VLAN must
already exist on the switch.)
i. Click the Save button.
Your settings are saved and the rule is added.
For more information about adding a rule for a MAC ACL, see Add a rule for a MAC
ACL on page 453.
10. Select Security > ACL > MAC ACL > MAC Binding Configuration.
The IP Binding Configuration page displays.
11. Bind the ACL with the name Sales_ACL to ports 6, 7, and 8, and assign a sequence
number of 1:
a. From the ACL ID menu, select Sales_ACL.
b. In the Sequence Number field, type 1
This number defines the order of the MAC ACL relative to other ACLs that are
bound to the interface.
c. In the Ports table, click ports 6, 7 and 8.
The selected ports display blue.
d. Click the Apply button.
Your settings are saved.
By default, this MAC ACL is bound on the inbound direction, so it examines traffic
as it enters the switch. For more information about binding a MAC IP ACL to an
interface, see Configure a MAC ACL interface binding on page 458.
12. Select Security > ACL > MAC ACL > Binding Table.
The Binding Table page displays.
13. Verify that the ACL is bound to ports 6, 7, and 8.
For more information about MAC ACL bindings, see Display or delete MAC ACL
bindings on page 460.
Configuration Examples 571 User Manual