User Manual

Managing Device Security
476
M6100 Web Management User Guide
To configure MAC ACL rules:
1. Use ID to enter a whole number in the range of (1 to 1023) that will be used to identify
the rule.
2. Use Action to specify what action should be taken if a packet matches the rule's criteria.
The choices are permit or deny
.
3. Use Assign Queue ID to specify the hardware egress queue identifier used to handle all
packets matching this
ACL rule. Valid range of Queue Ids is (0 to 7).
4. Mirror Interface to specify the specific egress interface where the matching traf
fic stream is
copied in addition to being forwarded normally by the device. This field cannot be set if a
Redirect Interface is already configured for the ACL rule. This field is visible for a 'Permit'
Action.
5. Use Redirect Interface to specify the specific egress interface where the matching traf
fic
stream is forced, bypassing any forwarding decision normally performed by the device. This
field cannot be set if a Mirror Interface is already configured for the ACL rule.
6. Use Match Every to specify an indication to match every Layer 2 MAC packet.
Valid values are
• T
rue - Signifies that every packet is considered to match the selected ACL Rule.
• False - Signifies that it is not mandatory for every packet to match the selected
ACL
Rule.
7. Use CoS to specifies the 802.1p user priority to compare against an Ethernet frame. V
alid
range of values is (0 to 7).
8. Use Destination MAC to specify the destination MAC address to compare against an
Ethernet frame. V
alid format is (xx:xx:xx:xx:xx:xx). The BPDU keyword may be specified
using a Destination MAC address of 01:80:C2:xx:xx:xx.
9. Use Destination MAC Mask to specify the destination MAC address mask specifying which
bits in the destination MAC to compare against an Ethernet frame. V
alid format is
(xx:xx:xx:xx:xx:xx). The BPDU keyword may be specified using a Destination MAC mask of
00:00:00:ff:ff:ff.
10. Use EtherT
ype Key to specify the EtherType value to compare against an Ethernet frame.
Valid values are
• Appletalk
• ARP
• IBM SNA
• IPv4