User’s Manual of
4.11 Access Control Lists
ACL is an acronym for Access Control List. It is the list table of ACEs, containing access control entries that specify individual users or groups permitted or denied to specific traffic objects, such as a process or a program.
Each accessible traffic object contains an identifier to its ACL. The privileges determine whether there are specific traffic object access rights.
ACL implementations can be quite complex, for example, when the ACEs are prioritized for the various situation. In networking, the ACL refers to a list of service ports or network services that are available on a host or server, each with a list of hosts or servers permitted or denied to use the service. ACL can generally be configured to control inbound traffic, and in this context, they are similar to firewalls.
ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID.
There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application.
4.11.1 Access Control List Configuration
This page shows the Access Control List (ACL), which is made up of the ACEs defined for this Managed Switch. Each row describes the ACE that is defined.
The maximum number of ACEs is 128.
Click on the lowest plus sign to add a new ACE to the list.
The Access Control List Configuration screen in Figure
Figure 4-11-1 Access Control List Configuration page screenshot
The page includes the following fields:
ObjectDescription
• Ingress Port | Indicates the ingress port of the ACE. Possible values are: |
•Any: The ACE will match any ingress port.
159
