Manuals / Cabletron Systems / Power Tools / Router

Cabletron Systems 9032578-02 manual Layer-3 Access Control Lists ACLs, Anatomy of an ACL Rule

Models: 9032578-02

1 207
Download 207 pages 44.86 Kb
Page 170
Image 170

Chapter 10: Security Configuration Guide

Destination secure port: To block access to all file servers on all ports from port et.1.1 use the following command:

filters add secure-port name engineers direction dest vlan 1 in-port-list et.1.1

To allow all engineers access to the engineering servers, you must "punch" a hole through the secure-port wall. A "dest static-entry" overrides a "dest secure port".

filters add static-entry name eng-server dest-mac 080060:abcdef vlan 1 in-port-list et.1.1 out-port-list et.1.2 restriction allow

Layer-3 Access Control Lists (ACLs)

Layer-3 & Layer-4 Traffic Filters (Access Control List)

Access Control Lists (ACLs) allow you to restrict Layer-3/4 traffic going through the router. Each ACL or each list consists of one or more rules describing a particular type of IP or IPX traffic. An ACL can be simple, consisting of only one rule, or complicated with many rules. Each rule tells the router to either permit or deny the packet that matches the rule's packet description.

Anatomy of an ACL Rule

Each ACL is identified by a name. The name can be a meaningful string, such as denyftp or noweb or it can be a number such as 100 or 101.

Each rule has an action, that is, to permit or to deny the packet if a packet satisfies the criterion defined by the rule.

A criterion describes one or more characteristics about a packet. In an ACL rule, these characteristics are described as fields of a rule. Not all characteristics (fields) of a packet (rule) need to be specified. If a particular field is not specified, it is treated as a wildcard or "don't care" condition. However, if a field is specified, that particular field will be matched against the packet. Each protocol can have a number of different fields to match. For example, TCP can use socket port numbers while IPX can use a network node address to define a rule. For IP, TCP and UDP ACLs, the following fields can be specified:

•Source IP address

•Destination IP address

•Source port number

•Destination port number

170

SmartSwitch Router User Reference Manual

Page 169 Page 171
Page 170
Image 170
Cabletron Systems 9032578-02 Layer-3 Access Control Lists ACLs, Layer-3 & Layer-4 Traffic Filters Access Control List
Page 169 Page 171

9032578-02 specifications

Cabletron Systems 9032578-02 is a notable component in the realm of networking equipment, especially recognized for its robust performance and reliability. As part of Cabletron’s commitment to delivering high-quality networking solutions, this device has become integral for many organizations seeking efficient data management.

One of the standout features of the 9032578-02 is its advanced switching capabilities. With the ability to manage multiple data streams seamlessly, it ensures that data packets are routed efficiently, minimizing latency and maximizing throughput. This is particularly crucial in environments where high-volume data transfer is the norm, such as in data centers or enterprises with extensive digital infrastructures.

The device is equipped with various connectivity options that enhance its versatility. These include support for multiple types of network interfaces, allowing for easy integration into existing systems. Whether it's Ethernet connections or fiber optics, the 9032578-02 accommodates diverse network requirements, making it suitable for various applications across different industries.

In terms of technology, the Cabletron Systems 9032578-02 employs cutting-edge networking protocols that ensure secure and reliable communication. This includes support for both IPv4 and IPv6 protocols, which future-proofs the device as organizations transition to newer standards. The incorporation of Quality of Service (QoS) features further enhances its capability to prioritize critical network traffic, ensuring that bandwidth-intensive applications receive the necessary resources for optimal performance.

Another critical characteristic of the 9032578-02 is its scalability. Organizations can expand their network infrastructure without the need for complete system overhauls. This modularity allows businesses to grow and adapt to changing demands while maintaining investment in their existing technology.

Additionally, Cabletron integrates advanced monitoring and management tools within the 9032578-02. Network administrators can easily track performance metrics, analyze traffic patterns, and troubleshoot issues in real-time. This level of visibility is essential for maintaining a stable network environment, particularly in dynamic organizational settings.

In summary, Cabletron Systems 9032578-02 is synonymous with high performance, scalability, and advanced technology. Its comprehensive features make it an excellent choice for organizations requiring reliable networking solutions that can adapt to evolving demands and ensure efficient data communication across their systems.