COMMAND LINE INTERFACE

•This switch supports ACLs for ingress filtering only. You can only bind one IP ACL to any port and one MAC ACL globally for ingress filtering. In other words, only two ACLs can be bound to an interface - Ingress IP ACL and Ingress MAC ACL.

The order in which active ACLs are checked is as follows:

1.User-defined rules in the Ingress MAC ACL for ingress ports.

2.User-defined rules in the Ingress IP ACL for ingress ports.

3.Explicit default rule (permit any any) in the ingress IP ACL for ingress ports.

4.Explicit default rule (permit any any) in the ingress MAC ACL for ingress ports.

5.If no explicit rule is matched, the implicit default is permit all.

Table 4-33 Access Control Lists

Command

Function

Page

Groups

 

 

 

 

 

IP ACLs

Configures ACLs based on IP addresses, TCP/UDP

4-118

 

port number, protocol type, and TCP control code

 

 

 

 

MAC ACLs

Configures ACLs based on hardware addresses, packet

4-128

 

format, and Ethernet type

 

 

 

 

ACL Information

Displays ACLs and associated rules; shows ACLs

4-135

 

assigned to each port

 

 

 

 

IP ACLs

Table 4-34 IP ACLs

Command

Function

Mode

Page

access-list ip

Creates an IP ACL and enters configuration

GC

4-119

 

mode

 

 

 

 

 

 

permit, deny

Filters packets matching a specified source

STD-ACL

4-120

 

IP address

 

 

 

 

 

 

permit, deny

Filters packets meeting the specified criteria,

EXT-ACL

4-122

 

including source and destination IP address,

 

 

 

TCP/UDP port number, protocol type, and

 

 

 

TCP control code

 

 

 

 

 

 

4-118

Page 357 Page 359
Page 358
Image 358
SMC Networks SMC6752AL2 manual IP ACLs, Access Control Lists
Page 357 Page 359

SMC6752AL2 specifications

The SMC Networks SMC6752AL2 is a robust and versatile gigabit Ethernet switch designed to cater to the demands of medium to large enterprise networks. This switch delivers an impressive combination of performance, flexibility, and manageability, making it an ideal solution for businesses seeking to enhance their network infrastructure.

One of the standout features of the SMC6752AL2 is its 48 Gigabit Ethernet ports, allowing for high-speed network connections to a variety of devices such as servers, workstations, and other networked equipment. Additionally, the switch includes 4 SFP (Small Form-factor Pluggable) slots that provide options for connecting to other networking devices via fiber optics, enhancing the versatility of the network configuration.

The SMC6752AL2 supports advanced Layer 2 switching capabilities, which are crucial for efficient data handling and traffic management. With features such as VLAN (Virtual Local Area Network) support, the switch can segment network traffic to improve performance and security while effectively managing broadcast domains. It supports 802.1Q VLAN tagging, allowing for better network segmentation and isolation of different types of traffic.

Moreover, the switch is equipped with Quality of Service (QoS) features to prioritize critical data transmissions. This is essential for applications requiring real-time data flow, such as VoIP (Voice over Internet Protocol) and video conferencing. The SMC6752AL2's QoS capabilities enable users to classify and prioritize traffic, ensuring a smooth and seamless experience for bandwidth-intensive applications.

The SMC6752AL2 also includes features such as port mirroring and link aggregation, enhancing the monitoring and management capabilities of the network. Port mirroring allows administrators to duplicate traffic from one port to another for analysis and troubleshooting, while link aggregation enables combining multiple connections for increased bandwidth and redundancy.

In terms of security, the switch supports802.1X port-based authentication, providing a layer of network access control that ensures only authorized users can connect. This feature, combined with the ability to create access control lists (ACLs), helps to safeguard the network against unauthorized access and other potential threats.

Overall, the SMC Networks SMC6752AL2 is a feature-rich Ethernet switch that offers reliable performance and advanced capabilities for managing enterprise networks. Its combination of port density, layer 2 switching features, QoS functionalities, and enhanced security makes it an excellent choice for organizations looking to expand or upgrade their networking solutions. With the SMC6752AL2, businesses can maintain high-performance connectivity and effective network management tailored to their specific operational needs.
Top Page Image Contents