User Manual

S350 Series 24-Port (PoE+) and 48-Port Gigabit Ethernet Smart Switches
Manage Device Security User Manual264
As a sample, the following steps describe how you can specify the additional match criteria
for an ACL based on the destination MAC address:
a. In the Destination MAC field, specify the destination MAC address that must be
compared against the information in an Ethernet frame.
The format is xx:xx:xx:xx:xx:xx. The BPDU keyword can be specified using a
destination MAC address of 01:80:C2:xx:xx:xx.
b. In the Destination MAC Mask field, specify the destination MAC address mask that
must be compared against the information in an Ethernet frame.
The format is xx:xx:xx:xx:xx:xx. The BPDU keyword can be specified using a
destination MAC mask of 00:00:00:ff:ff:ff.
c. In the VLAN ID field, specify which VLAN must be compared against the information
in an Ethernet frame.
The range is from 1 to 4093. Either a VLAN range or VLAN can be configured.
11. In the Binding Configuration section, from the Direction menu, select the packet filtering
direction for the ACL.
Only the inbound direction is valid.
12. In the Ports and LAG tables in the Binding Configuration section, select the ports and LAGs
to which the ACL must be applied.
13. Click the Add button.
The rule is added to the ACL.
14. Click the Apply button.
Your settings are saved.
Modify an ACL Rule
To modify an ACL rule:
1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or
connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser.
3. In the address field of your web browser, enter the IP address of the switch.
If you do not know the IP address of the switch, see Discover or Change the Switch IP
Address on page 12.
The login window opens.
4. Enter the switch’s password in the Password field.
The default password is password.
The System Information page displays.