Switch User Manual

FS728TP Smart Switch Software Administration Manual
6-32 Managing Security
v1.1, September 2009
• Destination Port – Enter the destination port that is matched to packets.
• DSCP – Match the packet DSCP value to the ACL. Either the DSCP value or the IP
Precedence value is used to match packets to ACLs. The possible field range is 0-63.
• IP Prec. – Match the packet IP Precedence value to the ACL.
• Action – Select the action applied to packets with IP addresses that have been filtered. The
possible field values are:
– Permit – Permits access to the device.
– Deny – Denies access to packets originating from the blocked IP address.
– Shutdown – Drops packets that meet the ACL criteria, and disable the port to which
the packet was addressed.
2. Select the ACL Name from the list in the provided field.
3. Select the rule entry.
4. Enter the provided fields in the first row.
5. Click APPLY to update the device.
To add an IPv6 rule:
1. Click Security > ACL > IPv6 Rules. The IPv6 Rules screen displays.
2. Select the ACL Name from the list in the provided field.
3. Click ADD to create a new entry or duplicate an existing entry.
4. Select the added entry.
5. Enter the provided fields in the first row.
6. Click APPLY to update the device.
To delete an IP rule:
1. Click Security > ACL > IPv6 Rules. The IPv6 Rules screen displays.
2. Select the ACL Name from the list in the provided field.
3. Select the rule entry.
4. Click DELETE to remove the entry.