User Manual

S350 Series 24-Port (PoE+) and 48-Port Gigabit Ethernet Smart Switches
Manage Device Security User Manual280
8. Specify the following match criteria for the rule:
• Sequence Number. Enter an ACL sequence number in the range from 1 to
2147483647 that is used to identify the rule. An IP ACL can contain up to 50 rules.
• Action. Select the ACL forwarding action, which is one of the following:
- Permit. Forward packets that meet the ACL criteria.
Egress Queue. If the selection form the Action menu is Permit, you can specify
the hardware egress queue identifier that is used to handle all packets matching
this IP ACL rule.
For models GS324T and GS324TP, the range for the queue ID is from 0 to 3. For
model GS348T, the range for the queue ID is from 0 to 7.
- Deny. Drop packets that meet the ACL criteria.
Logging. If the selection from the Action menu is Deny, you can enable logging
for the ACL by selecting the Enable radio button. (Logging is subject to resource
availability on the switch.)
If you enable logging and you also enable ACL system traps (see
Configure
SNMPv1/v2 Trap Flags on page 82), a SNMP trap is sent when a packet matches
this ACL rule.
• Match Every. Select one of the radio buttons to specify whether all packets must
match the selected IP ACL rule:
- Enable. All packets must match the selected IP ACL rule and are either permitted
or denied.
- Disable. Not all packets need to match the selected IP ACL rule.
• Interface. Select one of the radio buttons to specify whether all packets must be
mirrored or redirected:
- Mirror. From the menu, select the specific egress interface to which the matching
traffic stream must be copied, in addition to being forwarded normally by the
switch.
- Redirect. From the menu, select the egress interface to which the matching traffic
stream must be redirected, bypassing any forwarding decision normally
performed by the switch.
• Src IP Address. Enter an IP address using dotted-decimal notation to be compared
to a packet’s source IP address as a match criterion for the selected IP ACL rule.
• Src IP Mask. Specify the IP mask in dotted-decimal notation to be used with the
source IP address value.
9. Click the Apply button.
Your settings are saved.