User Manual

M4300 Intelligent Edge Series Fully Managed Stackable Switches
Manage Switch Security User Manual606
Configure MAC ACL Rules
You can define rules for MAC-based ACLs. The access list definition includes rules that
specify whether traffic matching the criteria is forwarded normally or discarded. A default
deny all rule is the last rule of every list.
To configure MAC ACL rules:
1. Launch a web browser
.
2. In the address field of your web browser
, enter the IP address of the switch.
The login window opens.
3. Enter admin as the user name, enter your local device password,
and click the Login
button.
The first time that you log in, no password is required. However, you then must specify a
local device password to use each subsequent time that you log in.
The System Information page displays.
4. Select Security >
ACL > Basic > MAC Rules.
5. From the ACL Name menu, select the MAC
ACL for which you want to add or a change a
rule.
6. Use Sequence Number to enter a whole number in the range of 1 to 2147483647.
This number is used to identify the rule. A MAC ACL can contain up to 1023 rules.
7. Use Action to specify what action is taken if a packet matches the rule's criteria.
The choices are Permit or Deny.
8. Use Assign Queue ID to specify the hardware egress queue identifier used to handle all
packets matching this
ACL rule.
Valid range of queue IDs is 0 to 7.
9. Mirror Interface to specify the specific egress interface where the matching traf
fic stream is
copied in addition to being forwarded normally by the device.
This field cannot be set if a redirect interface is already configured for the ACL rule. This
field is visible for a Permit action.
10. Use Redirect Interface to specify the specific egress interface where the matching traf
fic
stream is forced, bypassing any forwarding decision normally performed by the device.