User Manual

M4300 Intelligent Edge Series Fully Managed Stackable Switches
Manage Switch Security User Manual615
• Src IP Address. Enter an IP address using dotted-decimal notation to be compared
to a packet’s source IP address as a match criteria for the selected IP ACL rule.
• Src IP Mask. Specify the IP mask in dotted-decimal notation to be used with the
source IP address.
• Rate Limit Conform Data Rate. V
alue of Rate Limit Conform Data Rate specifies the
conforming data rate of IP ACL Rule. Valid values are 1 to 4294967295 in Kbps.
• Rate Limit Burst Size. V
alue of Rate Limit Burst Size specifies burst size of the IP
ACL rule. Valid values are 1 to 128 in Kbytes.
• Time Range. Name of time range associated with the IP
ACL rule.
8. Click the Apply button.
Your settings are saved.
The Rule Status field on IP Rules page displays whether the
ACL rule is active or
inactive. Blank means that no timer schedules are assigned to the rule.
Configure Rules for an Extended IP ACL
You can view the rules for the IP access control lists that you created. What is shown on this
page varies depending on the step in the rule configuration process.
Note: An implicit deny all default rule exists as the last rule of an ACL list.
This means that if an ACL is applied to a packet and if none of the
explicit rules match, the final implicit deny all rule applies and the
packet is dropped.
To configure rules for an extended IP ACL:
1. Launch a web browser
.
2. In the address field of your web browser
, enter the IP address of the switch.
The login window opens.
3. Enter admin as the user name, enter your local device password,
and click the Login
button.
The first time that you log in, no password is required. However, you then must specify a
local device password to use each subsequent time that you log in.
The System Information page displays.
4. Select Security >
ACL > Advanced > IP Extended Rules.