User Manual

Manage Device Security
360
M4100 Series Managed Switch
• Destination IP Address. Enter an IP address using dotted-decimal notation to be
compared to a packet's destination IP address as a match criteria for the selected
extended IP ACL rule.
• Destination IP Mask. Specify the IP mask in dotted-decimal notation to be used with
the destination IP address value.
• Destination L4 Port. Specify the destination Layer 4 port match conditions for the
selected extended IP ACL rule. The possible values are DOMAIN, ECHO, FTP,
FTPDATA, WWW-HTTP, SMTP, SNMP, TELNET and TFTP. Each of these values
translates into its equivalent port number, which is used as both the start and end of
the port range. This is an optional configuration.
• Service Type. Select a service type match condition for the extended IP ACL rule.
The possible values are IP DSCP, IP precedence, and IP TOS, which are alternative
ways of specifying a match criterion for the same Service Type field in the IP header;
however, each uses a different user notation. After you make a selection, you can
specify the appropriate:
• IP DSCP. Specify the IP DiffServ Code Point (DSCP) field. The DSCP is the
high-order six bits of the service type octet in the IP header. This is an optional
configuration. To specify the IP DSCP, select a keyword, or select Other and enter
an integer from 0 to 63. (When you select Other, a field displays where you can
enter the numeric value of the DSCP.)
• IP Precedence. The IP Precedence field in a packet is defined as the high-order
three bits of the service type octet in the IP header. This is an optional
configuration. Enter an integer from 0 to 7.
• IP TOS. The IP TOS field in a packet is defined as all eight bits of the service type
octet in the IP header. The TOS Bits value is a hexadecimal number from 00 to FF.
The TOS Mask value is a hexadecimal number from 00 to FF. The TOS mask
denotes the bit positions in the TOS Bits value that are used for comparison
against the IP TOS field in a packet. For example, to check for an IP TOS value
having bits 7 and 5 set and bit 1 clear, where bit 7 is most significant, use a TOS
Bits value of 0xA0 and a TOS Mask of 0xFF. This is an optional configuration.
• Rate Limit Conform Data Rate. The value of Rate Limit Conform Data Rate specifies
the conforming data rate of IP ACL rule. The valid values are 1 to 4294967295 in
Kbps.
• Rate Limit Burst Size. Value of Rate Limit Burst Size specifies the burst size of the
IP ACL rule. The valid values are 1 to 128 in Kbytes.
• Time Range. Name of time range associated with the IP Extended ACL rule.
• Rule Status. Displays if the ACL rule is active or inactive. Blank means that no timer
schedules are assigned to the rule.
10. To delete an IP ACL rule, select the check box associated with the rule, and then click the
DELETE button.
11. To modify an existing IP extended ACL rule, click the Rule ID. The number is a hyperlink to
the Extended ACL Rule Configuration screen.