Chapter 10: Security Configuration Guide

Maintaining ACLs Using the ACL Editor

In addition to the traditional method of maintaining ACLs using TFTP or RCP, the SSR provides a simpler and more user-friendly mechanism to maintain ACL: the ACL Editor.

The ACL Editor can only be accessed within Configure mode using the

acl-editcommand. You can specify the ACL you want to edit by specifying its name together with the acl-editcommand. For example, to edit ACL “101”, you issue the command acl-edit 101. The only restriction is that when you edit a particular ACL, you cannot add rules for a different ACL. You can only add new rules for the ACL that you are currently editing. When the editing session is over, that is, when you are done making changes to the ACL, you can save the changes and make them take effect immediately. Within the ACL editor, you can add new rules (add command), delete existing rules (delete command) and re-order the rules (move command). To save the changes, use the save command or simply exit the editor.

If you edit and save changes to an ACL that is currently being used or applied to an interface, the changes will take effect immediately. There is no need to remove the ACL from the interface before making changes and re-apply after changes are made. The whole process is automatic.

Configure ACL

To configure an ACL, perform the following tasks:

1.Determine the access control criteria you want to impose on traffic going to or through the router.

2.Determine where (which interface) you want to set up these controls.

Defining an IP ACL

To define an IP ACL, perform the following in the Configure mode:

Define an IP ACL.

acl <name> permitdeny iptcpudpicmpigmp

<srcaddr/mask>any <dstaddr/mask>any

Note: Additional fields depend on the protocol type you select.

176

SmartSwitch Router User Reference Manual

Page 176
Image 176
Cabletron Systems 9032578-02 manual Maintaining ACLs Using the ACL Editor, Configure ACL, Defining an IP ACL

9032578-02 specifications

Cabletron Systems 9032578-02 is a notable component in the realm of networking equipment, especially recognized for its robust performance and reliability. As part of Cabletron’s commitment to delivering high-quality networking solutions, this device has become integral for many organizations seeking efficient data management.

One of the standout features of the 9032578-02 is its advanced switching capabilities. With the ability to manage multiple data streams seamlessly, it ensures that data packets are routed efficiently, minimizing latency and maximizing throughput. This is particularly crucial in environments where high-volume data transfer is the norm, such as in data centers or enterprises with extensive digital infrastructures.

The device is equipped with various connectivity options that enhance its versatility. These include support for multiple types of network interfaces, allowing for easy integration into existing systems. Whether it's Ethernet connections or fiber optics, the 9032578-02 accommodates diverse network requirements, making it suitable for various applications across different industries.

In terms of technology, the Cabletron Systems 9032578-02 employs cutting-edge networking protocols that ensure secure and reliable communication. This includes support for both IPv4 and IPv6 protocols, which future-proofs the device as organizations transition to newer standards. The incorporation of Quality of Service (QoS) features further enhances its capability to prioritize critical network traffic, ensuring that bandwidth-intensive applications receive the necessary resources for optimal performance.

Another critical characteristic of the 9032578-02 is its scalability. Organizations can expand their network infrastructure without the need for complete system overhauls. This modularity allows businesses to grow and adapt to changing demands while maintaining investment in their existing technology.

Additionally, Cabletron integrates advanced monitoring and management tools within the 9032578-02. Network administrators can easily track performance metrics, analyze traffic patterns, and troubleshoot issues in real-time. This level of visibility is essential for maintaining a stable network environment, particularly in dynamic organizational settings.

In summary, Cabletron Systems 9032578-02 is synonymous with high performance, scalability, and advanced technology. Its comprehensive features make it an excellent choice for organizations requiring reliable networking solutions that can adapt to evolving demands and ensure efficient data communication across their systems.