Operation Manual

208
Operation:
Select the operation for the switch to process packets which match
the rules.
 Permit: Forward packets.

Deny: Discard Packets.
Fragment: Select if the rule will take effect on the fragment. When th
e fragment
is selected, this rule will process all the fragments and the last piece
of fragment will be always forwarded.
S-IP:
Enter the source IP address contained in the rule.
D-IP:
Enter the destination IP address contained in the rule.
Mask: Enter
IP address mask. If it is set to 1, it must strictly match the
address.
Time-Range:
Select the time-range for the rule to take effect.
12.2.5 Extend-IP ACL
Extend-IP ACLs analyze and process data packets based on a series of match conditions,
which can be the source IP addresses, destination IP addresses, IP protocol and other
information of this sort carried in the packets.
Choose the menu ACL→ACL Config→Extend-IP ACL to load the following page.
Figure12-8 Create Extend-IP Rule