User’s Manual of
4.11.2 ACE Configuration
Configure an ACE (Access Control Entry) on this page.
An ACE consists of several parameters. These parameters vary according to the frame type that you select. First select the ingress port for the ACE, and then select the frame type. Different parameter options are displayed depending on the frame type that you selected.
A frame that hits this ACE matches the configuration that is defined here.
|
|
|
Object | Description | |
• | Ingress Port | Select the ingress port for which this ACE applies. |
|
| Any: The ACE applies to any port. |
|
| Port n: The ACE applies to this port number, where n is the number of the switch port. |
|
| Policy n: The ACE applies to this policy number, where n can range from 1 through 8. |
|
|
|
• | Switch | Select the switch to which this ACE applies. |
|
| Any: The ACE applies to any port. |
|
| Switch n: The ACE applies to this switch number, where n is the number of the switch. |
|
|
|
• | Frame Type | Select the frame type for this ACE. |
|
| Any: Any frame can match this ACE. |
|
| Ethernet Type: Only Ethernet Type frames can match this ACE. |
|
| ARP: Only ARP frames can match this ACE. |
|
| IPv4: Only IPv4 frames can match this ACE. |
|
|
|
• | Action | Specify the action to take with a frame that hits this ACE. |
|
| Permit: The frame that hits this ACE is granted permission for the ACE operation. |
|
| Deny: The frame that hits this ACE is dropped. |
|
|
|
• | Rate Limiter | Specify the rate limiter in number of base units. The allowed range is 1 to 15. Disabled |
|
| indicates that the rate limiter operation is disabled. |
|
|
|
• | Port Copy | Frames that hit the ACE are copied to the port number specified here. The allowed |
|
| range is the same as the switch port number range. Disabled indicates that the port |
|
| copy operation is disabled. |
|
|
|
• | Logging | Specify the logging operation of the ACE. The allowed values are: |
|
| Enabled: Frames matching the ACE are stored in the System Log. |
|
| Disabled: Frames matching the ACE are not logged. |
|
| Please note that the System Log memory size and logging rate is limited. |
|
|
|
• | Shutdown | Specify the port shut down operation of the ACE. The allowed values are: |
|
| Enabled: If a frame matches the ACE, the ingress port will be disabled. |
|
| Disabled: Port shut down is disabled for the ACE. |
|
|
|
• | Counter | The counter indicates the number of times the ACE was hit by a frame. |
|
|
|
|
|
|
161
