User Manual

8-Port Gigabit (PoE+) Ethernet Smart Managed Pro Switch with (2 SFP or 2 Copper Ports and)
Cloud Management
Manage Device Security User Manual376
9. Specify the following match criteria for the rule:
• Sequence Number. Enter an ACL sequence number in the range from 1 to
2147483647 that is used to identify the rule. An IP
ACL can contain up to 50 rules.
• Action. Select the ACL forwarding action, which is one of the following:
-
Permit. Forward packets that meet the ACL criteria.
Egress Queue. If the selection form the Action
menu is Permit, you can specify
the hardware egress queue identifier that is used to handle all packets matching
this IP ACL rule. The range of queue IDs is from 0 to 7.
-
Deny. Drop packets that meet the ACL criteria.
Logging. If the selection from the Action
menu is Deny, you can enable logging
for the ACL by selecting the Enable
radio button. (Logging is subject to resource
availability on the switch.)
• Match Every. Select one of the radio buttons to specify whether all packets must
match the selected IP ACL rule:
- Enable
. All packets
must match the selected IP ACL rule and are either permitted
or denied.
- Disable. Not all packets need to match the selected IP ACL rule.
• Interface
. Select one of the radio buttons to specify whether all packets must be
mirrored or redirected:
- Mirror.
From the
menu, select the specific egress interface to which the matching
traffic stream must be copied, in addition to being forwarded normally by the
switch.
- Redirect. From the
menu, select the egress interface to which the matching traffic
stream must be redirected, bypassing any forwarding decision normally
performed by the switch.
• Source IP Address. Enter an IP address using dotted-decimal notation to be
compared to a packet’s source IP address as a match criterion for the selected IP
ACL rule.