D-Link user manual Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series

Models: DGS-3100

1 209
Download 209 pages 46.85 Kb
Page 174
Image 174
Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series

DGS-3100 Series Gigabit Stackable Managed Switch User Manual

Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series

ACLs can be configured in DGS-3100 series via the WEB GUI in two ways: through the ‘ACL Configuration Wizard’ screen (by automatic creation of profile and rule) and through the ‘ACL Profile List’ page by manual creation of profiles and rules.

By using the ‘ACL Configuration Wizard’ page the user can create simple ACLs in a simple way, after setting a rule via this page, the system will create an ‘Access Profile’ and also an ‘Access Rule’ and will bind it to a port or a group of ports. Each operation via the Wizard can create either MAC based ACL or IP based ACL, the user can’t combine both types of ACLs in the same operation.

NOTE: Access Profile can be a MAC Access Profile or an IP Access Profile, when using the ACL Conriguration Wizard, ‘IP’ or ‘MAC’ should be selected in the ‘From’ and ‘To’ dropdowns. When using the ‘Access Profile List’ page, after clicking: ‘Add Access Profile’, the user can choose wether to create ‘L2 ACL’ (MAC) or ‘L3 ACL’ (IP).

The user can set IP based ACL and MAC Based ACL on the same port(s) is the following: way:

Go to ‘Add Access Profile’ page.

Add L2 Access Profile with the desired fields.

Add L3 Access Profile with the desired fields.

Go to ‘Access Rule List’ page, create rules for both profiles and apply it on the same port(s). Now you have on the port(s) IP Based ACL and MAC Based ACL.

NOTE: Adding rules to specific profile will have a unique Access ID in the range 1-240.

When the user is adding a rule to different profiles he can’t use the same Access ID for different rules.

162

Page 174
Image 174
D-Link user manual Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series