User Manual

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports
Manage Device Security User Manual342
9. Configure the following match criteria for the rule:
• Action. Select the ACL forwarding action by selecting one of the foll
owing radio
buttons:
- Permit. Forward packets that meet the ACL criteria.
-
Deny. Drop packets that meet the ACL criteria.
•
Egress Queue. If you select the Permit radio button, select the hardware egress
queue identifier that is used to handle all packets matching this IPv6 ACL rule.
The
range of queue IDs is 0 to 7.
• Logging. If you select the Deny radio button, you can enable logging for the ACL by
selecting the
Enable radio button. (Logging is subject to resource availability in the
device.)
If the access list trap flag is also enabled, periodic traps are generated,
indicating the
number of times this rule was evoked during the report interval. A fixed five-minute
report interval is used for the switch. A trap is not issued if the ACL rule hit count is
zero for the current interval.
• Interface. For a Permit action, use either a mirror interface or a redirect interface:
- Select the Mirror radio
button and use the menu to specify the egress interface to
which the matching traffic stream is copied, in addition to being forwarded
normally by the device.
- Select the Redirect radio
button and use the menu to specify the egress interface
to which the matching traffic stream is forced, bypassing any forwarding decision
normally performed by the device.
• Match Every. Select whether all packet must match the selected IPv6 ACL ru
le:
- False. Not all packets need to match the selected IPv6 ACL rule.
You can
configure other match criteria on the page.
- True. All packets must match the selected IPv6 ACL rule and are either permitted
or denied. In this case, you cannot configure other match crite
ria on the page.
• Protocol Type. Specify the IPv6 protocol type in one of the following ways:
- From the Protocol T
ype menu, select
IPv6, ICMPv6, TCP, or UDP.
- From the Protocol Type menu, select
Other, and in the associated field, specify
an integer ranging from 0 to 255. This number represents the IPv6 protocol.
• Src. In the Src
field, enter a source IPv6 address or source IPv6 address range to be
compared to a packet’s source IPv6 address as a match criterion for the selected
IPv6 ACL rule:
- If you select the IPv6 Address
radio button, enter an IPv6 address or IPv6 range
to apply this criteria. If this field is left empty, it means any.
- If you select the Host
radio button, enter a host source IPv6 address to match the
specified IPv6 address. If this field is left empty, it means any.
The source IPv6 address argument must be in the form documented in RFC 2373
where the address is specified in hexadecimal numbers using 16-bit values between
colons.