D-Link Web Smart DES-3252P Install Manual page 145

Figure 87: Add IP Based ACL Page
In addition to the fields in the Add IP Based ACL Page contains the following additional fields:
•
New ACE Priority — Defines the new ACE priority, which determines which ACE is matched to a packet on
a first-match basis. The possible field values are 1-2147483647.
•
Wild Card Mask — Indicates the source MAC Address wildcard mask. Wildcards are used to mask all or part
of a source MAC address. Wildcard masks specify which bits are used and which are ignored. A wildcard
mask of FF:FF:FF:FF:FF:FF indicates that no bit is important. A wildcard of 00.00.00.00.00.00.00 indicates
that all bits are important. For example, if the source MAC address is 00:AB:22:11:33:00 and the wildcard
mask is 00:00:00:00:00:FF, the first two bits of the MAC are used, while the last two bits are ignored.
3. Define the ACL Name, New Priority, Protocol, Source Port, Destination Port, Source IP Interface, Destination
Port, WIldcard Mask, Match DSCP, Match IP Precedence, and Action fields.
4. Click . The IP based protocol is defined, and the device is updated.
To modify an IP-based ACL:
1. Click Security > Network Security > Access Control > IP Based ACL.
2. Select an ACL.
3. Click . The IP Based ACL Settings opens:
Page 145
Configuring Device Security
Configuring Network Security