Configuring ACLs

The switch does not support the explicit “deny any” rule for the egress IP ACL or the egress MAC ACLs. If these rules are included in the ACL, and you attempt to bind the ACL to an interface for egress checking, the bind operation will fail.

Command Attributes

Command Attributes

Port: Fixed port or SFP module. (Range: 1-24)

IP: Specifies the IP ACL to bind to a port.

MAC: Specifies the MAC ACL to bind to a port.

IN: ACL for ingress packets.

OUT: ACL for egress packets.

ACL Name: Name of the ACL.

Binding a Port to an Access Control List - Web

Click ACL, ACL Port Binding. Mark the Enable field for the port you want to bind to an ACL for ingress or egress traffic, select the required ACL from the drop-down list, then click Apply.

FIG. 82 Mapping ACLs to Port Ingress/Egress Queues

Binding a Port to an Access Control List - CLI

This example assigns an IP and MAC ingress ACL to port 1, and an IP ingress ACL to port 2.

Console(config)#interface ethernet 1/1300

Console(config-if)#ip access-group david in273

Console(config-if)#mac access-group jerry in284

Console(config-if)#exit

Console(config)#interface ethernet 1/2

Console(config-if)#ip access-group david in

Console(config-if)#

82

NXA-ENET24 - Software Management Guide

Page 102
Image 102
AMX NXA-ENET24 manual Binding a Port to an Access Control List CLI, Mapping ACLs to Port Ingress/Egress Queues

NXA-ENET24 specifications

The AMX NXA-ENET24 is a versatile and powerful networked control interface designed to meet the growing demands of modern AV systems. This network switch offers an exceptional combination of reliability, performance, and scalability, making it an ideal choice for professional environments such as conference rooms, educational facilities, and control rooms.

One of the key features of the NXA-ENET24 is its 24-port configuration, allowing for extensive connectivity options. Each port supports 10/100/1000 Mbps speeds, ensuring that high bandwidth applications are handled with ease. Additionally, the switch incorporates advanced auto-negotiation technology, which automatically configures the optimal speed and duplex mode for connected devices. This ensures seamless connectivity and minimizes the risk of network disruptions.

The NXA-ENET24 is designed with advanced management capabilities, including support for VLANs, which helps to segment network traffic for enhanced security and performance. Network administrators can easily create virtual local area networks to optimize traffic flow and reduce congestion. This feature is particularly beneficial in environments where multiple AV systems operate concurrently.

Another significant characteristic of the NXA-ENET24 is its support for Power over Ethernet, or PoE. This feature enables the switch to deliver electrical power alongside data through the network cables. As a result, devices such as IP cameras, VoIP phones, and wireless access points can be powered directly from the switch, simplifying deployment and reducing the need for additional power sources.

Monitoring and management of the switch are made easier through a user-friendly interface. The NXA-ENET24 supports SNMP for network management, allowing users to monitor performance metrics, configure settings, and receive alerts in case of issues. This level of oversight is crucial for maintaining the stability of AV systems in mission-critical applications.

Durability is another hallmark of the NXA-ENET24 design. The switch features a robust chassis that is engineered to withstand the rigors of professional use. With cooling mechanisms in place and a fanless design, the NXA-ENET24 operates quietly and efficiently, making it suitable for environments where noise is a concern.

In conclusion, the AMX NXA-ENET24 is a powerful, reliable, and feature-rich network switch that effectively supports modern AV applications. With its extensive connectivity options, advanced management capabilities, PoE support, and durable design, it is an excellent choice for integrators and organizations looking to optimize their network infrastructure.