Creating and Editing Access Control Policies

Create or edit the Access Control Policies (ACLs) to allow or deny access to address objects or address groups. Before you start creating ACL policies for Switch you need to create Matched Object and Matched Group.

To create Matched Object

1. Navigate to Objects > Matched Objects.
   

2. Click Add (+). The Add Matched Object dialog displays.

3. Specify an Object Name and Description.

4. Select the value for the fields Type, Source MAC Address, Destination MAC Address, VLAN, 802.1p and Ethertype from their respective drop down lists.
5. Click OK.

To create Matched Group

1. Navigate to Objects > Matched Objects.
2. Click the Matched Group tab.
   

3. Click Add (+). The Add Matched Group dialog displays.

4. Specify a group name and description.

5. From the list, select protocols.
6. In list on the left, select the protocols you want included in your new Matched Group. On this screen, you can choose the settings for the group.
7. Click Add.
8. Click OK.

To create or edit an access control policy

1. Navigate to Policies > Security Policies > Switches.
2. Click Add + or Config/Edit. The Add/Edit New Security Policy page displays.
3. Enter an ACL Policy Name.
4. From the Type list, select ACL Security Policy.
5. Click Next.
6. In the L2 ACLsection, Click on Add Matched Group button to add a new Matched Group.
7. Select the Matched Group from the drop down list.
8. Select the Mode value Allow or Deny.
9. You can remove a Matched Group from the list by clicking on delete icon.
10. Click OK to save changes.

The ACL policy is configured and added to the list.