User Manual

8-Port Gigabit (PoE+) Ethernet Smart Managed Pro Switch with (2 SFP or 2 Copper Ports and)
Cloud Management
Manage Device Security User Manual380
9. Configure the following match criteria for the rule:
• Sequence Number. Enter a
number in the range from 1 to 2147483647 that is used to
identify the rule. An extended IP ACL can contain up to 50 rules.
• Action. Select the ACL forwarding action, which is one of the following:
-
Permit. Forward packets that meet the ACL criteria.
Egress Queue. If the selection from the Action
menu is Permit, select the
hardware egress queue identifier that is used to handle all packets matching this
IP ACL rule. The range of queue IDs is 0 to 7.
-
Deny. Drop packets that meet the ACL criteria.
Logging. If the selection form the Action
menu is Deny, you can enable logging
for the ACL by selecting the Enable
radio button. (Logging is subject to resource
availability in the device.)
• Interface. For a Permit action, use either a mirror interface or a redirect interface:
- Select the Mirror radio button
and use the menu to specify the egress interface to
which the matching traffic stream is copied, in addition to being forwarded
normally by the device.
- Select the Redirect radio button
and use the menu to specify the egress interface
to which the matching traffic stream is forced, bypassing any forwarding decision
normally performed by the device.
• Match Every. Select one of the radio buttons to specify whether all packets must
match the selected IP ACL rule:
- False
. Not all packets need to match
the selected IP ACL rule. You can configure
other match criteria on the page.