Specifications
Table Of Contents
- Table of Contents
- Preface Template Formats
- Web-based (GUI) Configuration
- Configuration
- Device Information
- System Information
- Serial Port Settings
- IP Address Settings
- IPv6 Address Settings
- IPv6 Route Settings
- IPv6 Neighbor Settings
- Port Configuration Folder
- Static ARP Settings
- User Accounts
- System Log Configuration Folder
- DHCP Relay Folder
- MAC Address Aging Time
- Web Settings
- Telnet Settings
- CLI Paging Settings
- Firmware Information
- SNTP Settings Folder
- SMTP Settings Folder
- SNMP Settings Folder
- Layer 2 Features
- Jumbo Frame
- VLANs
- 802.1Q Static VLAN
- Q-in-Q Folder
- 802.1v Protocol VLAN Folder
- GVRP Settings
- Asymmetric VLAN Settings
- MAC-based VLAN Settings
- PVID Auto Assign Settings
- Port Trunking
- LACP Port Settings
- Traffic Segmentation
- IGMP Snooping Folder
- MLD Snooping Settings
- Port Mirror
- Loopback Detection Settings Page
- Spanning Tree Folder
- Forwarding & Filtering Folder
- LLDP Folder
- Quality of Service (QoS)
- Security
- Access Control List (ACL)
- Monitoring
- Save and Tools
- System Log Entries
- Trap List
Chapter 6: Access Control List (ACL)
Extreme Networks EAS 100-24t Switch Software Manual
138
There are four sets of Access Profile configuration windows; one for Ethernet (or MAC address-based)
profile configuration, one for IP (IPv4) address-based profile configuration, one for the Packet Content
and one for IPv6. Explore the four types of Access Profile configuration options by using the drop-down
menu to select a Profile ID between 1 and 256 (1 has been selected in this example), using the radio
button to select an ACL Type (Ethernet ACL has been selected in this example), and then clicking
Select. Next, click on the boxes near the top of the window, which will then turn red and reveal
parameters for configuration (MAC Address, 802.1Q VLAN, 802.1p, and Ethernet Type have been
selected in this example). At least one mask must then be selected before clicking the Create button
(802.1p has been ticked in this example). To return to the Access Profile List window, click <<Back.
In this window, the following parameters can be configured:
Clicking Create on the previous Add ACL Profile window inserts a new Access Profile List entry in the
Access Profile List window shown below. To add another Access Profile, click Add ACL Profile. To
delete a profile click the corresponding Delete button, to delete all the entries click on the Delete All
button, to view the specific configurations for an entry click the Show Details button.
Parameters Description
Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 or packet
content mask. This will change the window according to the requirements for
the type of profile.
Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each
packet header.
Select IPv4 ACL to instruct the Switch to examine the IPv4 address in each
frame's header.
Select IPv6 ACL to instruct the Switch to examine the IPv6 address in each
frame’s header.
Select Packet Content ACL to specify a mask to mask the content of the
packet header.
MAC Address Tick either Source MAC Mask and enter the source MAC address mask or
Destination MAC Mask and enter the destination MAC address mask.
802.1Q VLAN VLAN - Specifies a VLAN.
VLAN Mask (0-FFF) - Specifies a VLAN mask.
Selecting this option instructs the Switch to examine the VLAN identifier of
each packet header and use this as the full or partial criterion for forwarding.
802.1p Selecting this option instructs the Switch to examine the 802.1p priority value
of each packet header and use this as the, or part of the criterion for
forwarding.
Ethernet Type Selecting this option instructs the Switch to examine the Ethernet type value in
each frame's header.