LevelOne GEL-2670 User Manual page 110

| Configuring the Switch
C 4
HAPTER
Configuring Security
Any - any value is allowed, Yes - IPv4 frames where the MF bit is set
or the FRAG OFFSET field is greater than zero must match this
entry, No - IPv4 frames where the MF bit is set or the FRAG OFFSET
field is greater than zero must not match this entry; Default: Any)
IP Option - Specifies the options flag setting for this rule. (Options:
■
Any - any value is allowed, Yes - IPv4 frames where the options flag
is set must match this entry, No - IPv4 frames where the options
flag is set must not match this entry; Default: Any)
SIP Filter - Specifies the source IP filter for this rule.
■
(Options: Any - no source IP filter is specified, Host - specifies the
source IP address in the SIP Address field, Network - specifies the
source IP address and source IP mask in the SIP Address and SIP
Mask fields; Default: Any)
DIP Filter - Specifies the destination IP filter for this rule.
■
(Options: Any - no destination IP filter is specified, Host - specifies
the destination IP address in the DIP Address field, Network -
specifies the destination IP address and destination IP mask in the
DIP Address and DIP Mask fields; Default: Any)
Response to take when a rule is matched
Action - Permits or denies a frame based on whether it matches an
◆
ACL rule. (Default: Permit)
Rate Limiter - Specifies a rate limiter
◆
(Range: 1-16; Default: Disabled)
Port Redirect - Port to which frames matching the ACE are redirected.
◆
(Default: Disabled)
Mirror - Mirrors matching frames from this port. (Default: Disabled)
◆
See "Configuring Local Port Mirroring" on page
ACL-based port mirroring set by this parameter and port mirroring set
on the general Mirror Configuration page are implemented
independently. To use ACL-based mirroring, enable the Mirror
parameter on the ACE Configuration page. Then open the Mirror
Configuration page, set the "Port to mirror on" field to the required
destination port, and leave the "Mode" field Disabled.
Logging - Enables logging of matching frames to the system log.
◆
(Default: Disabled)
Open the System Log Information menu
stored in the system log for this entry. Related entries will be displayed
under the "Info" or "All" logging levels.
Shutdown - Shuts down a port when a macthing frame is seen.
◆
(Default: Disabled)
Counter - Shows he number of frames which have matched any of the
◆
rules defined for this ACL.
– 110 –
(page 103) to apply to the port.
213.
(page 227) to view any entries