CLI (Command Line Interface)

IP ACL Commands (Cont.)

Command

Function

 

 

permit, deny

Command Usage: All new rules are appended to the end of the list.

(Extended ACL - Cont.)

Address bitmasks are similar to a subnet mask, containing four integers

 

from 0 to 255, each separated by a period. The binary mask uses 1 bits to

 

indicate “match” and 0 bits to indicate “ignore.” The bitmask is bitwise

 

ANDed with the specified source IP address, and then compared with the

 

address for each IP packet entering the port(s) to which this ACL has been

 

assigned.

 

You can specify both Precedence and ToS in the same rule. However, if

 

DSCP is used, then neither Precedence nor ToS can be specified.

 

The control-code bitmask is a decimal number (representing an equivalent

 

bit mask) that is applied to the control code. Enter a decimal number,

 

where the equivalent binary bit “1” means to match a bit and “0” means to

 

ignore a bit. The following bits may be specified:

 

• 1 (fin) – Finish

 

• 2 (syn) – Synchronize

 

• 4 (rst) – Reset

 

• 8 (psh) – Push

 

• 16 (ack) – Acknowledgement

 

• 32 (urg) – Urgent pointer

 

For example, use the code value and mask below to catch packets with the

 

following flags set:

 

• SYN flag valid, use “control-code 2 2”

 

• Both SYN and ACK valid, use “control-code 18 18”

 

• SYN valid and ACK invalid, use “control-code 2 18”

 

Example:

This example accepts any incoming packets if the source address is within subnet 10.7.1.x. For example, if the rule is matched; i.e., the rule (10.7.1.0

&255.255.255.0) equals the masked address (10.7.1.2 & 255.255.255.0), the packet passes through:

Console(config-ext-acl)#permit 10.7.1.1 255.255.255.0 any

Console(config-ext-acl)#

Example:

This allows TCP packets from class C addresses 192.168.1.0 to any desti- nation address when set for destination TCP port 80 (i.e., HTTP):

Console(config-ext-acl)#permit 192.168.1.0 255.255.255.0 any destination-port 80

Console(config-ext-acl)#

Example:

This permits all TCP packets from class C addresses 192.168.1.0 with the

TCP control code set to “SYN:

Console(config-ext-acl)#permit tcp 192.168.1.0 255.255.255.0 any control-flag 2 2

Console(config-ext-acl)#

212

NXA-ENET24 - Software Management Guide

Page 232
Image 232
AMX NXA-ENET24 manual Command Function Permit, deny, Ignore a bit. The following bits may be specified

NXA-ENET24 specifications

The AMX NXA-ENET24 is a versatile and powerful networked control interface designed to meet the growing demands of modern AV systems. This network switch offers an exceptional combination of reliability, performance, and scalability, making it an ideal choice for professional environments such as conference rooms, educational facilities, and control rooms.

One of the key features of the NXA-ENET24 is its 24-port configuration, allowing for extensive connectivity options. Each port supports 10/100/1000 Mbps speeds, ensuring that high bandwidth applications are handled with ease. Additionally, the switch incorporates advanced auto-negotiation technology, which automatically configures the optimal speed and duplex mode for connected devices. This ensures seamless connectivity and minimizes the risk of network disruptions.

The NXA-ENET24 is designed with advanced management capabilities, including support for VLANs, which helps to segment network traffic for enhanced security and performance. Network administrators can easily create virtual local area networks to optimize traffic flow and reduce congestion. This feature is particularly beneficial in environments where multiple AV systems operate concurrently.

Another significant characteristic of the NXA-ENET24 is its support for Power over Ethernet, or PoE. This feature enables the switch to deliver electrical power alongside data through the network cables. As a result, devices such as IP cameras, VoIP phones, and wireless access points can be powered directly from the switch, simplifying deployment and reducing the need for additional power sources.

Monitoring and management of the switch are made easier through a user-friendly interface. The NXA-ENET24 supports SNMP for network management, allowing users to monitor performance metrics, configure settings, and receive alerts in case of issues. This level of oversight is crucial for maintaining the stability of AV systems in mission-critical applications.

Durability is another hallmark of the NXA-ENET24 design. The switch features a robust chassis that is engineered to withstand the rigors of professional use. With cooling mechanisms in place and a fanless design, the NXA-ENET24 operates quietly and efficiently, making it suitable for environments where noise is a concern.

In conclusion, the AMX NXA-ENET24 is a powerful, reliable, and feature-rich network switch that effectively supports modern AV applications. With its extensive connectivity options, advanced management capabilities, PoE support, and durable design, it is an excellent choice for integrators and organizations looking to optimize their network infrastructure.