User Manual

Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power
Manage Switch Security User Manual346
• Match Every. From the Match Every menu, select whether all packets must match
the selected IP ACL rule:
- Enable. All packets must match the selected IP ACL rule and are either permitted
or denied.
- Disable. Not all packets need to match the selected IP ACL rule.
• Select either a mirror interface or a redirect interface:
- Mirror Interface. From the Mirror menu, select the specific egress interface to
which the matching traffic stream must be copied, in addition to being forwarded
normally by the switch.
- Redirect Interface. From the Redirect menu, select the egress interface to which
the matching traffic stream must be redirected, bypassing any forwarding decision
normally performed by the switch.
You can configure either a mirror interface or a redirect interface, but you cannot
configure both for the same IP ACL rule. You can configure a mirror or a redirect
interface only for a Permit action.
• Source IP Address. Enter an IP address using dotted-decimal notation to be
compared to a packet’s source IP address as a match criterion for the selected IP
ACL rule.
• Source IP Mask. Specify the IP mask in dotted-decimal notation to be used with the
source IP address value.
Wildcard masks determine which bits are used and which bits are ignored. A wildcard
masking for an ACL functions differently from a subnet mask. A wildcard mask is in
essence the inverse of a subnet mask. For example, to apply the rule to all hosts in
the 192.168.1.0/24 subnet, enter 0.0.0.255 in the Source IP Mask field. A wildcard
mask of 255.255.255.255 indicates that no bit is important. A wildcard mask of 0.0.0.0
indicates that all of the bits are important.
10. Click the Apply button.
Your settings are saved.
Modify the match criteria for a basic IPv4 ACL rule
To modify the match criteria for a basic IPv4 ACL rule:
1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or
connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser.
3. In the address field of your web browser, enter the IP address of the switch.
For information about finding the IP address of the switch, see Access the switch on
page 14.
The Local Device Login page displays.