ECS4660-28F_Management Guide-R03

C HAPTER 13 | Security Measures
Access Control Lists
– 405 –
◆ Source/Destination Address Type – Use “Any” to include all possible
addresses, “Host” to indicate a specific MAC address, or “MAC” to
specify an address range with the Address and Bit Mask fields.
(Options: Any, Host, MAC; Default: Any)
◆ Source/Destination MAC Address – Source or destination MAC
address.
◆ Source/Destination Bit Mask – Hexadecimal mask for source or
destination MAC address.
◆ Packet Format – This attribute includes the following packet types:
■
Any – Any Ethernet packet type.
■
Untagged-eth2 – Untagged Ethernet II packets.
■
Untagged-802.3 – Untagged Ethernet 802.3 packets.
■
Tagged-eth2 – Tagged Ethernet II packets.
■
Tagged-802.3 – Tagged Ethernet 802.3 packets.
◆ VID – VLAN ID. (Range: 1-4094)
◆ VID Bit Mask – VLAN bit mask. (Range: 0-4095)
◆ Ethernet Type – This option can only be used to filter Ethernet II
formatted packets. (Range: 0-ffff hex.)
A detailed listing of Ethernet protocol types can be found in RFC 1060.
A few of the more common types include 0800 (IP), 0806 (ARP), 8137
(IPX).
◆ Ethernet Type Bit Mask – Protocol bit mask. (Range: 0-ffff hex.)
◆ Time Range – Name of a time range.
WEB INTERFACE
To add rules to a MAC ACL:
1. Click Security, ACL.
2. Select Configure ACL from the Step list.
3. Select Add Rule from the Action list.
4. Select MAC from the Type list.
5. Select the name of an ACL from the Name list.
6. Specify the action (i.e., Permit or Deny).
7. Select the address type (Any, Host, or MAC).