User Manual

24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports
Configuration Examples User Manual520
Basic IPv4 ACL example configuration
The following example shows how to create an IPv4-based ACL that prevents any IP traffic
from the Finance department from being allowed on the ports that are associated with other
departments. Traffic from the Finance department is identified by each packet’s network IP
address.
1. On the IP
ACL page, create a new IP ACL with an IP ACL ID of 1. (See Configure a
basic or extended IPv4 ACL on page 418.)
2. On the IP Rules page, create a rule for IP
ACL 1 with the following settings:
• Sequence Number. 1
• Action. Deny
• Assign Queue ID. 0 (optional: 0 is the default value)
• Match Every. False
• Source IP Address. 192.168.187.0
• Source IP Mask. 255.255.0
For additional information about IP ACL rules, see
Configure rules for a basic IPv4 ACL
on page 422.
3. Click the Add button.
4. On the IP Rules page, create a second rule for IP
ACL 1 with the following settings:
• Sequence Number. 2
• Action. Permit
• Match Every. T
rue
5. Click the Add button.
6. On the IP Binding Configuration page, assign
ACL ID 1 to the interface Gigabit ports 2, 3,
and 4, and assign a sequence number of 1. (See
Configure IP ACL interface bindings on
page 445.)
By default, this IP ACL is bound on the inbound direction, so it examines traffic as it
enters the switch.
7. Click the Apply button.
8. Use the IP Binding
Table page to view the interfaces and IP ACL binding information. (See
View or delete IP ACL bindings in the IP ACL binding table on page 447)
The IP ACL in this example matches all packets with the source IP address and subnet mask
of the Finance department’
s network and deny it on the Ethernet interfaces 2, 3, and 4 of the
switch. The second rule permits all non-Finance traffic on the ports. The second rule is
required because an explicit deny all rule exists as the lowest priority rule.