Shutdown - The switch drops packets that do not meet the required criteria of the ACE and disables the port where the packets were received. Permit - The switch forwards packets that meet the required criteria of the ACE.ĭeny - The switch drops packets that meet the required criteria of the ACE. Click the radio button that corresponds to the desired action that is taken when a frame meets the required criteria of the ACE. (Optional) Check the Enable Logging check box to enable logging ACL flows that match the ACL rule. ACEs with a higher priority value are processed first. Enter the priority value for the ACE in the Priority field. Note: The ACL Name field displays the name of the ACL. Click the Add button to add a new rule to the ACL. Note: The ACEs that are already configured for the ACL will be displayed in the table. Choose an ACL from the ACL Name drop-down list then click Go. Important: To fully utilize the available features and functions of the switch, change to Advanced mode by choosing Advanced from the Display Mode drop-down list in the upper-right corner of the page. On the web-based utility, go to Access Control > MAC-Based ACE. Note: This default action can be avoided by the creation of a low priority ACE that permits all traffic. In this scenario, an ACE will be created to deny traffic that is sent from a specific user-defined source MAC address to any destination addresses. If no match is found to any ACE in all relevant ACLs, the frame is dropped by default. If the frame matches none of the ACE filters, the next ACL is processed. If the frame matches an ACE filter of the first ACL, the ACE action takes place. When a frame is received on a port, the switch processes the frame through the first ACL. You should now have configured a MAC-based ACL on your switch. (Optional) Click Save to save settings in the startup configuration file. Enter the name of the new ACL in the ACL Name field. Log in to the web-based utility then go to Access Control > MAC-Based ACL.
0 Comments
Leave a Reply. |