User Manual

Table Of Contents
Manage Device Security
301
Insight Managed 28-Port and 52-Port Gigabit Ethernet Smart Cloud Switches
ACL Wizard Example
In the following figure, the ACL rule is configured to check for packet matches on ports 4, 5,
and 9 and on LAG 1. Only the Inbound option is valid. Packets that include a source address
in the 192.168.3.0/16 network are permitted to be forwarded by the interfaces. All other
packets are dropped because every ACL includes an implicit deny all rule as the last rule.
The following figure show the page for models GC752X and GC752XP. Models GC728X and
GC728XP support 24 Ethernet ports but the same number of LAGs (24).
For information about the ACL Wizard, see Use the ACL Wizard to Create a Simple ACL on
page 296.
Configure a Basic MAC ACL
A MAC ACL consists of a set of rules that are matched sequentially against a packet. When a
packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken,
and the additional rules are not checked for a match.
Multiple steps are involved in defining a MAC ACL and applying it to the switch:
1. Create the ACL ID.
2. Create a MAC rule.
3. Associate the MAC ACL with one or more interfaces.
You can view or delete MAC ACL configurations in the MAC Binding table (see View or
Delete MAC ACL Bindings in the MAC Binding Table on page 310.