Reference Guide

Network Security 239
• Match IP Precedence(0-7) — Check to enable matching
IP-precedence with the packet IP-precedence value. IP-
precedence enables marking frames that exceed the CIR
threshold. In a congested network, frames containing a higher DP
value are discarded before frames with a lower DP value. If this
field is checked, enter a value to be matched.
–
Time Range Name — Check to associate a time range with the ACE.
Select one of the time ranges defined in the
Time Range page.
–
Action — Select the ACL forwarding action. The following options
are available:
•
Permit — Forward packets which meet the ACL criteria.
•
Deny — Drop packets which meet the ACL criteria.
•
Shutdown — Drop packet that meet the ACL criteria, and disable
the port to which the packet was addressed.
–
Logging of Dropped Packets — Check to activate logging of dropped
packets.