Specifications
Table Of Contents
- Table of Contents
- Preface Template Formats
- Web-based (GUI) Configuration
- Configuration
- Device Information
- System Information
- Serial Port Settings
- IP Address Settings
- IPv6 Address Settings
- IPv6 Route Settings
- IPv6 Neighbor Settings
- Port Configuration Folder
- Static ARP Settings
- User Accounts
- System Log Configuration Folder
- DHCP Relay Folder
- MAC Address Aging Time
- Web Settings
- Telnet Settings
- CLI Paging Settings
- Firmware Information
- SNTP Settings Folder
- SMTP Settings Folder
- SNMP Settings Folder
- Layer 2 Features
- Jumbo Frame
- VLANs
- 802.1Q Static VLAN
- Q-in-Q Folder
- 802.1v Protocol VLAN Folder
- GVRP Settings
- Asymmetric VLAN Settings
- MAC-based VLAN Settings
- PVID Auto Assign Settings
- Port Trunking
- LACP Port Settings
- Traffic Segmentation
- IGMP Snooping Folder
- MLD Snooping Settings
- Port Mirror
- Loopback Detection Settings Page
- Spanning Tree Folder
- Forwarding & Filtering Folder
- LLDP Folder
- Quality of Service (QoS)
- Security
- Access Control List (ACL)
- Monitoring
- Save and Tools
- System Log Entries
- Trap List
Chapter 6: Access Control List (ACL)
Extreme Networks EAS 100-24t Switch Software Manual
152
Access Profile List – Packet Content ACL
To create a Packet Content ACL, click Add ACL Profile in the Access Profile List window and then use
the drop-down menu to select a Profile ID between 1 and 256 and click the Packet Content ACL radio
button. Click Select and the following window will appear:
Click on the boxes at the top of the table, which will then turn red and reveal parameters for
configuration. To create a new entry enter the correct information and click Create. To return to the
Access Profile List window, click <<Back.
In this window, the following parameters can be configured:
Click Apply to implement changes made.
Parameters Description
Packet Content Allows users to examine up to four specified offset packet content chunks
within a packet at one time and specifies the offset and mask. The four offsets
can be selected in the following format:
Offset 1 (2-126) _____mask______
Offset 2 (2-126) _____mask______
Offset 3 (2-126) _____mask______
Offset 4 (2-126) _____mask______
With this advanced unique Packet Content Mask (also known as Packet
Content Access Control List - ACL), the Switch can effectively mitigate some
network attacks like the common ARP Spoofing attack that is wide spread
today. This is why the Packet Content ACL is able to inspect any specified
content of a packet in different protocol layers.