Switch Administration Guide

Technical Documentation>  System Management>  Security>  ACL Management>  IPv4-Based ACE
Table of Contents

IPv4-Based ACE

Allows IP Based Access Control Entry (ACE) to be defined within a configured ACL.

ACL Name Select the ACL from the list.
Sequence Enter the sequence number which signifies the order of the specified ACL relative to other ACLs assigned to the selected inter- face. The valid range is from 1-2147483646, 1 being processed first.
Action

Select what action to take if a packet matches the criteria.

  • Permit – Forwards packets that meet the ACL criteria.
  • Deny– Drops packets that meet the ACL criteria.
Protocol

Select Any, Protocol ID, or Select from a List in the drop-down menu.

  • Protocol ID – Enter the protocol in the ACE to which the packet is matched. The range is from 0-255.
  • Select from List–Selects the protocol from the list in the provided field.
Source IP Address Select Any or User defined.
Source IP Mask Enter the mask of the new source IP address.
Destination IP Address Select Any or User defined.
Destination IP Mask Enter the mask of the designation IP address.
Source Port Range Select Single or Range from the list. Enter the source port that is matched to the packets. The range is from 0-65535.
Destination Port Range Select Single or Range from the list Enter the destination port that is matched to the packets. The range is from 0-65535.
Source IP Address Value Enter the source IP address.
ICMP

Select Any, Protocol ID, or Select from the List in drop down menu.

  • Protocol ID – Enter the protocol in the ACE to which the packet is matched. The range is from 0-255.
  • Select from List– Select the ICMP from the list in the provided field.
ICMP Code Enter the ICMP code. The range is from 0-255.
Type of Service Enter the DSCP. The range is from 0-63.

Click Apply to save the changes to the system.

After creating the MAC or IPv4ACL, bind it with a port by applying it in the Switch port settings. Select a port to edit, then navigate to the ACL binding section.