4.8.1.5 Extend-IP ACL
The Extend-IP ACLs analyze and process data packets based on a series of match conditions, which can be the source IP
addresses, destination IP addresses, IP protocol and other information of this sort carried in the packets; the screen in
4-8-7
appears.
The page includes the following fields:
Object
Create Extend-IP Rule
ACL ID
Rule ID
Operation
S-IP
D-IP
Mask
IP Protocol
S-Port
D-Port
Figure 4-8-7: Extend-IP ACL Page Screenshot
Description
Select the desired Extend-IP ACL for configuration.
Enter the rule ID.
Select the operation for the Managed Switch to process packets which match the
rules.
Permit: Forward packets.
Deny: Discard Packets.
Enter the source IP address contained in the rule.
Enter the destination IP address contained in the rule.
Enter IP address mask. If it is set to 1, it must strictly match the address.
Select IP protocol contained in the rule.
Configure TCP/IP source port contained in the rule when TCP/UDP is selected from
the pull-down list of IP Protocol.
Configure TCP/IP destination port contained in the rule when TCP/UDP is selected
from the pull-down list of IP Protocol.
187
User's Manual of FGSW-2840 / FGSW-4840S
Figure