Acl Configuration; Acl Configuration Task List - Digitalchina Networks DCS-3950 series Manual

The following rules apply:
An access-list can consist of several rules. Filtering of packets compares packet
conditions to the rules, from the first rule to the first matched rule; the rest of the rules
will not be processed.
Global default action applies only to IP packets in the incoming direction on the ports.
For non- incoming IP packets and all outgoing packets, the default forward action is
'permit'.
Global default action applies only when packet flirter is enabled on a port and no ACL
is bound to that port, or no binding ACL matches.
When an access-list is bound to the outgoing direction of a port, the action in the rule
can only be 'deny'.

15.3 ACL Configuration

15.3.1 ACL Configuration Task List

1. Configuring access-list
Configuring a numbered standard IP access-list
（1）
Configuring a numbered extended IP access-list
（2）
Configuring a standard IP access-list based on nomenclature
（3）
a) Create a standard IP access-list based on nomenclature
b) Specify multiple 'permit' or 'deny' rule entries.
c) Exit ACL Configuration Mode
Configuring an extended IP access-list based on nomenclature.
（4）
a) Create an extensive IP access-list based on nomenclature
b) Specify multiple 'permit' or 'deny' rule entries.
c) Exit ACL Configuration Mode
Configuring a numbered standard MAC access-list
（5）
Configuring a numbered extended MAC access-list
（6）
Configuring a standard MAC access-list based on nomenclature
（7）
a) Create a standard IP access-list based on nomenclature
b) Specify multiple 'permit' or 'deny' rule entries.
c) Exit ACL Configuration Mode
Configuring a numbered extended MAC-IP access-list
（8）
Configuring a standard MAC-IP access-list based on nomenclature
（9）
a) Create a standard MAC-IP access-list based on nomenclature
b) Specify multiple 'permit' or 'deny' rule entries.
DCS-3950 series Ethernet switch manual
250