Configuring ACLs

FIG. 76 Configuring Extended ACLs

Configuring a MAC ACL

Command Attributes

Command Attributes

Action:An ACL can contain permit rules, deny rules, or a combination of both. (Default: Permit rules)

Source/Destination Use “Any” to include all possible addresses, “Host” to indicate a specific MAC

Address Type: address, or “MAC” to specify an address range with the Address and Bitmask fields.

Options: Any, Host, MAC

Default: Any

Source/Destination Source or destination MAC address.

MAC Address:

Source/Destination Hexadecimal mask for source or destination MAC address.

Bitmask:

• VID:

VLAN ID. (Range: 1-4095)

VID Mask: VLAN bitmask. (Range: 1-4095)

Ethernet Type: This option can only be used to filter Ethernet II formatted packets.

Range: 600-fff hex.

A detailed listing of Ethernet protocol types can be found in RFC 1060. A few of the more common types include 0800 (IP), 0806 (ARP), 8137 (IPX).

• Ethernet Type

Protocol bitmask. (Range: 600-fff hex.)

Bitmask:

 

Packet Format: This attribute includes the following packet types:

Any – Any Ethernet packet type.

Untagged-eth2 – Untagged Ethernet II packets.

Untagged-802.3 – Untagged Ethernet 802.3 packets.

Tagged-eth2 – Tagged Ethernet II packets.

Tagged-802.3 – Tagged Ethernet 802.3 packets.

Packet Format This attribute includes the following packet types:

Bitmask:

• Any – Any Ethernet packet type.

 

Untagged-eth2 – Untagged Ethernet II packets.

 

Untagged-802.3 – Untagged Ethernet 802.3 packets.

 

Tagged-eth2 – Tagged Ethernet II packets.

 

Tagged-802.3 – Tagged Ethernet 802.3 packets.

Command Usage

Egress MAC ACLs only work for destination-mac-known packets, not for multicast, broadcast, or destination- mac-unknown packets.

Configuring a MAC ACL - Web

Specify the action (i.e., Permit or Deny). Specify the source and/or destination addresses. Select the address type (Any, Host, or MAC).

If you select “Host,” enter a specific address (e.g., 11-22-33-44-55-66).

If you select “MAC,” enter a base address and a hexadecimal bitmask for an address range. Set any other required criteria, such as VID, Ethernet type, or packet format. Then click Add.

NXA-ENET24 - Software Management Guide

77

 

 

Page 97
Image 97
AMX NXA-ENET24 manual Configuring a MAC ACL Web

NXA-ENET24 specifications

The AMX NXA-ENET24 is a versatile and powerful networked control interface designed to meet the growing demands of modern AV systems. This network switch offers an exceptional combination of reliability, performance, and scalability, making it an ideal choice for professional environments such as conference rooms, educational facilities, and control rooms.

One of the key features of the NXA-ENET24 is its 24-port configuration, allowing for extensive connectivity options. Each port supports 10/100/1000 Mbps speeds, ensuring that high bandwidth applications are handled with ease. Additionally, the switch incorporates advanced auto-negotiation technology, which automatically configures the optimal speed and duplex mode for connected devices. This ensures seamless connectivity and minimizes the risk of network disruptions.

The NXA-ENET24 is designed with advanced management capabilities, including support for VLANs, which helps to segment network traffic for enhanced security and performance. Network administrators can easily create virtual local area networks to optimize traffic flow and reduce congestion. This feature is particularly beneficial in environments where multiple AV systems operate concurrently.

Another significant characteristic of the NXA-ENET24 is its support for Power over Ethernet, or PoE. This feature enables the switch to deliver electrical power alongside data through the network cables. As a result, devices such as IP cameras, VoIP phones, and wireless access points can be powered directly from the switch, simplifying deployment and reducing the need for additional power sources.

Monitoring and management of the switch are made easier through a user-friendly interface. The NXA-ENET24 supports SNMP for network management, allowing users to monitor performance metrics, configure settings, and receive alerts in case of issues. This level of oversight is crucial for maintaining the stability of AV systems in mission-critical applications.

Durability is another hallmark of the NXA-ENET24 design. The switch features a robust chassis that is engineered to withstand the rigors of professional use. With cooling mechanisms in place and a fanless design, the NXA-ENET24 operates quietly and efficiently, making it suitable for environments where noise is a concern.

In conclusion, the AMX NXA-ENET24 is a powerful, reliable, and feature-rich network switch that effectively supports modern AV applications. With its extensive connectivity options, advanced management capabilities, PoE support, and durable design, it is an excellent choice for integrators and organizations looking to optimize their network infrastructure.