Table of Contents
Advertisement
10.2.5 Extend-IP ACL
Extend-IP ACLs analyze and process data packets based on a series of match conditions, which
can be the source IP addresses, destination IP addresses, IP protocol and other information of this
sort carried in the packets.
Choose the menu ACL→ACL Config→Extend-IP ACL to load the following page.
The following entries are displayed on this screen:
Create Extend-IP ACL
ACL ID:
Rule ID:
Operation:
Fragment:
S-IP:
D-IP:
Figure 10-8 Create Extend-IP Rule
Select the desired Extend-IP ACL for configuration.
Enter the rule ID.
Select the operation for the switch to process packets which match the
rules.
Permit: Forward packets.
Deny: Discard Packets.
Select if the rule will take effect on the fragment packets. When the
fragment is selected, this rule will process all the fragments and the
last piece of fragment will be always forwarded.
Enter the source IP address contained in the rule.
Enter the destination IP address contained in the rule.
146
Advertisement
Table of Contents
