Access Control Lists; Assigning Acl Policies And Responses - SMC Networks 8028L2 - annexe 1 Management Manual

A C L
CCESS ONTROL
A ACL
SSIGNING
P
OLICIES AND
R
ESPONSES
ISTS
An Access Control List (ACL) is a sequential list of permit or deny
conditions that apply to IP addresses, MAC addresses, or other more
specific criteria. This switch tests ingress packets against the conditions in
an ACL one by one. A packet will be accepted as soon as it matches a
permit rule, or dropped as soon as it matches a deny rule. If no rules
match, the frame is accepted. Other actions can also be invoked when a
matching packet is found, including rate limiting, copying matching packets
to another port or to the system log, or shutting down a port.
The ACL Port Configuration page can be used to define a port to which
matching frames are copied, enable logging, or shut down a port when a
matching frame is seen. Note that rate limiting (configured with the Rate
Limiter menu, page 118) is implemented regardless of whether or not a
matching packet is seen.
P
ARAMETERS
The following options are displayed on the ACL Port Configuration page:
Port - Port Identifier.
◆
Policy ID - An ACL policy configured on the ACE Configuration page
◆
(page 121). (Range: 1-8; Default: 1, which is undefined)
Action - Permits or denies a frame based on whether it matches a rule
◆
defined in the assigned policy. (Default: Permit)
Rate Limiter ID - Specifies a rate limiter
◆
port. (Range: 1-14; Default: Disabled)
Port Copy - Defines a port to which matching frames are copied.
◆
(Range: 1-28; Default: Disabled)
Shutdown - Shuts down a port when a macthing frame is seen.
◆
(Default: Disabled)
◆ Counter - The number of frames which have matched any of the rules
defined in the selected policy.
– 117 –
| Configuring the Switch
C 4
HAPTER

Access Control Lists

(page 118) to apply to the