3Com 2924-PWR User Manual

Page 68

HAPTER

4: M

ANAGING

EVICE

ECURITY

For example, if the source MAC address is E0:3B:4A:C2:CA:E2 and the
wildcard mask is 00:00:00:00:00:FF, the first five bytes of the MAC are
used, while the last byte is ignored. For the source MAC address
E0:3B:4A:C2:CA:E2, this wildcard mask matches all MAC addresses in
the range E0:3B:4A:C2:CA:00 to E0:3B:4A:C2:CA:FF.

■

Destination MAC Address — Matches the destination MAC address
to which packets are addressed to the rule.

■

Destination Mask — Defines the destination MAC Address wildcard
mask. Wildcards are used to mask all or part of a destination MAC
address. Wildcard masks specify which bits are used and which are
ignored. A wildcard mask of FF:FF:FF:FF:FF indicates that no bit is
important. A wildcard mask of 00.00.00.00.00.00 indicates that all
bits are important. For example, if the destination MAC address is
E0:3B:4A:C2:CA:E2 and the wildcard mask is 00:00:00:00:00:FF, the
first five bytes of the MAC are used, while the last byte is ignored. For
the destination MAC address E0:3B:4A:C2:CA:E2, this wildcard mask
matches all MAC addresses in the range E0:3B:4A:C2:CA:00 to
E0:3B:4A:C2:CA:FF.

■

VLAN ID — Matches the packet's VLAN ID to the rule. The possible
field values are 1 to 4093.

■

CoS — Classifies traffic based on the CoS tag value.

■

CoS Mask — Defines the CoS mask used to classify network traffic.

■

Ethertype — Defines an identifier that differentiates between various
types of protocols.

■

Action — Selects the ACL forwarding action. In addition, the port can
be shut down, a trap can be sent to the network administrator, or
packet is assigned rate limiting restrictions for forwarding. The options
are as follows:

■

Permit — Forwards packets which meet the ACL criteria.

■

Deny — Drops packets which meet the ACL criteria.

■

Shutdown — Drops packet that meets the ACL criteria, and
disables the port to which the packet was addressed. Ports are
reactivated from the Port Administration Setup Page.

2 Define the fields.

3 Click

. The MAC-based ACL rule settings are modified, and the

device is updated.