first ACE. When a packet is matched to an ACE classification, the ACE action is taken, and the ACL processing stops. If a match is not found, the packet is

dropped as a default action. If several ACLs are to be processed, the default action is applied only after processing all the ACLs. The default drop action

forwards all permitted traffic, including management traffic such as Telnet, HTTP, or SNMP, to the switch.

Network mangers can define two types of ACLs:

IP ACL—Applies only to IP packets. All classification fields are related to IP packets.

MAC ACL—Applies to any packet, including non-IP. Classification fields are based on L2 fields only.

Packets entering an ingress port with an active ACL are:

Forwarded.

Discarded and a trap is sent.

Discarded, a trap is sent, and the ingress port is disabled.

PowerConnect 3324/3348 supports up to 128 ACLs. PowerConnect 3324/3348 supports up to 248 ACEs per FE port and up to 120 ACEs per GE port can be

defined.

Configuring Port Security

Network users can be limited to specific ports or LAGs with Locked Ports. Locked Port is restricted to users with specific MAC addresses. Locked ports can only

be enabled on static MAC addresses. In addition, the Locked Port security option enables storing a list of MAC addresses in the Configuration file. The MAC

address list can be restored after the device has been reset. MAC addresses are learned either dynamically or statically.

Packets arriving at a locked port are either forwarded, dropped, or the packet is dropped, a trap is sent, and the ingress port is disabled. Disabled ports are

activated from the Port Parameters page. See

Select Switch > Network Security > Port Security. The Port Security page opens.

Port Security Page

The Port Security page contains the following fields:

"Defining Port

Parameters". To open the Port Security page:

Table of Contents