Ip And Mac-Based Acls On The Same Port; Adding Access Rules - D-Link DGS-3100 SERIES User Manual

3. Enter a port ID in the box adjacent to the Mask Generate button.
4. Alternatively, click
5. Enter a port ID range into the Generate Mask by range fields, and click
6. Click
NOTE: A combination of one or several filtering masks can be selected simultaneously. The page
updates with the relevant field(s).

IP and MAC-Based ACLs on the Same Port

IPv6-based ACLs and MAC-based ACLs cannot be defined on the same port. The user can, however, set IPv4-based ACL
and MAC-based ACL on the same port(s). This is performed in the following: way:
–
Go to 'Add Access Profile' page.
– Add L2 Access Profile with the desired fields.
– Add L3 IPv4-based Access Profile with the desired fields.
– Go to 'Access Rule List' page, create rules for both profiles and apply it on the same port(s) /LAG(s).
Now you have both an IPv4-based ACL and MAC-based ACL on the port(s) /LAG(s).
NOTE: Adding rules to specific profile generates a unique Access ID in the range 1-240.
When the user adds a rule to different profiles he cannot use the same Access ID for different
rules.

Adding Access Rules

The following conditions can be defined as Access Rules:
Filter
Source Port IP Address and Wildcard Mask
Destination Port IP Address and Wildcard Mask
Protocol
DSCP
Class
IP Precedence
Action
To add/change an access rule:
1. Click ACL > Access Profile List: The Access Profile List Page opens.
. The ACL profile is added, and the device is updated.
DGS-3100 Series Gigabit Stackable Managed Switch User Manual
. The Generate Mask by range fields appear.
Description
Filters the packets by the Source port IP address and wildcard
mask.
Filters the packets by the Source port IP address and wildcard
mask.
Filters the packets by the Layer 4 protocol.
Filters the packets by the DiffServ Code Point (DSCP) value.
Filters the packets by the Class value.
Filters the packets by the IP Precedence.
Indicates the action assigned to the packet matching the ACL
conditions. Packets are forwarded, dropped or going through
QoS action.
. The mask is generated.
224