User Manual

8-Port Gigabit (PoE+) Ethernet Smart Managed Pro Switch with (2 SFP or 2 Copper Ports and)
Cloud Management
Manage Device Security User Manual371
Configure a basic or extended IPv4 ACL
An IPv4 ACL consists of a set of rules that are matched sequentially against a packet. When
a packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken,
and the additional rules are not checked for a match. You must specify the interfaces to
which an IPv4 ACL applies, as well as whether it applies to inbound or outbound traffic.
Multiple steps are involved in defining an IPv4 ACL and applying it to the switch:
1. Add an IPv4 ACL ID (see
Add an IPv4 ACL on page 371).
The differences between a basic IPv4 ACL and an extended IPv4 ACL are as follows:
• Numbered ACL from 1 to 99. Creates a basic IPv4 ACL,
which allows you to permit
or deny traffic from a source IP address.
• Numbered ACL from 100 to 199. Creates an extended IPv4 ACL, which allows you
to
permit or deny specific types of Layer 3 or Layer 4 traffic from a source IP address
to a destination IP address. This type of ACL provides more granularity and filtering
capabilities than the basic IP ACL.
• Named IP ACL. Create an extended IPv4
ACL with a name string that is up to
31
alphanumeric characters in length. The name must start with an alphabetic character.
2. Create an IPv4 rule (see
Configure rules for a basic IPv4 ACL on page 374 or
Configure rules for an extended IPv4 ACL on page 378).
3. Associate the
IPv4 ACL with one or more interfaces (see Configure IP ACL interface
bindings on page 397).
You can view or delete IPv4 ACL configurations in the IP ACL Binding table (see
View or
delete IP ACL bindings in the IP ACL binding table on page 399.
Add an IPv4 ACL
To add an IPv4 ACL:
1. Connect your
computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or
connect directly to a switch that is off-network using an Ether
net cable.
2. Launch a web browser.
3. In the address field of your web browser, enter the IP address of the switch.
If you do not know the IP address of the switch, see
Access the switch on-network and
connected to the Internet on page 20 or Access the switch off-network and not
connected to the Internet on page 28.
The Device UI login page displays.
If you did not yet activate your warranty, the Register to activate your warranty page
displays. For more information, see
Register the switch on page 31.
4. Enter one of the following passwords:
• Enter your device admin password.