Configuring Device Security
Defining Access Control
ESW 500 Series Switches Administration Guide 174
•Traffic Cl ass — Indicates the traffic class to which the packets are matched.
The possible field values are:
-
Checked
— Matches packets to traffic classes.
-
Unchecked
— Does not match packets to traffic classes.
•Action — Indicates the action assigned to the packet matching the ACL.
Packets are forwarded or dropped. In addition, the port can be shut down, a
trap can be sent to the network administrator, or packet is assigned rate
limiting restrictions for forwarding. The options are as follows:
-
Permit
— Forwards packets which meet the ACL criteria.
-
Deny
— Drops packets which meet the ACL criteria.
-
Shutdown
— Drops packet that meets the ACL criteria, and disables the
port to which the packet was addressed. Ports are reactivated from the
Port Management
page.
STEP 3 Define the relevant fields,
STEP4 Click Apply. The IP Based ACL is defined, and the device is updated.
Modifying IP Based ACL
STEP1 Click Security > Access Control Lists (ACL) > IP Based ACL. The
IP Based ACL
Page
opens.
STEP 2 Click the Edit button. The
Edit IP Based ACL Page
opens: