Loading ...
Loading ...
Loading ...
Manage Device Security
294
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual
report interval is used for the switch. A trap is not issued if the ACL rule hit count is
zero for the current interval.
• Match Every. From the Match Every menu, select whether all packets must match
the selected IP ACL rule:
- False. Not all packets need to match the selected IP ACL rule. You can configure
other match criteria on the page.
- True. All packets must match the selected IP ACL rule and are either permitted or
denied. In this case, you cannot configure other match criteria on the page.
• Protocol Type. From the menu, select a protocol that a packet’s IP protocol must be
matched against: IP, ICMP, IGMP, TCP, UDP, or Other. If you select Other, enter a
protocol number from 0 to 255.
• Source IP Address. In the Source IP Address field, enter a source IP address,
using dotted-decimal notation, to be compared to a packet’s source IP address as a
match criterion for the selected IP ACL rule.
• Src IP Mask. In the Src IP Mask field, enter a source IP mask, using dotted-decimal
notation, to be compared to a packet’s source IP mask as a match criterion for the
selected IP ACL rule.
Wildcard masks determine which bits are used and which bits are ignored. A wildcard
mask of 255.255.255.255 indicates that none of the bits are important. A wildcard
mask of 0.0.0.0 indicates that all of the bits are important. Wildcard masking for ACLs
operates differently from a subnet mask. A wildcard mask is in essence the inverse of
a subnet mask. For example, to apply the rule to all hosts in the 192.168.1.0/24
subnet, enter 0.0.0.255 in the Src IP Mask field. This field is required when you
configure a source IP address.
• Source L4 port. The options are available only when the protocol is set to TCP or UDP.
Use the source L4 port option to specify relevant matching conditions for L4 port
numbers in the extended ACL rule.
The source port protocols are domain, echo, ftp, ftpdata, http, smtp, snmp, telnet,
tftp, and www. Each of these values translates into its equivalent port number.
Select Other from the menu to enter a port number from 0 to 65535.
• Destination IP Address. In the Destination IP Address field, enter a destination IP
address, using dotted-decimal notation, to be compared to a packet’s destination IP
address as a match criterion for the selected IP ACL rule.
• Dst IP Mask. In the Dst IP Mask field, enter a destination IP mask, using
dotted-decimal notation, to be compared to a packet’s destination IP mask as a match
criterion for the selected IP ACL rule.
Wildcard masks determine which bits are used and which bits are ignored.
A wildcard
mask of 255.255.255.255 indicates that
none of the bits are important. A wildcard
mask of 0.0.0.0 indicates that all of the bits are important. Wildcard masking for ACLs
operates differently from a subnet mask. A wildcard mask is in essence the inverse of
a subnet mask. For example, to apply the rule to all hosts in the 192.168.1.0/24
Loading ...
Loading ...
Loading ...