Allied Telesis AT-S63 - Manual (Page 149)

AT-S63 Management Software Features Guide
Section II: Advanced Operations 149
Parts of an ACL
An ACL must have the following information:
 Name - An ACL must have a name. The name of an ACL should
indicate the type of traffic flow being filtered and, perhaps, also the
action. An example might be “HTTPS flow - permit.” The more specific
the name, the easier it will be for you to identify it.
 Action - The action of an ACL can be permit or deny. Ingress traffic that
meets the criteria of an ACL with the permit action is accepted by a
port. Ingress traffic that meets the criteria of an ACL with the deny
action is discarded by a port, unless the traffic also meets the criteria of
a permit ACL on the same port, in which case it is accepted.
 Classifiers - An ACL must have at least one classifier. An ACL can
have more than one classifier to filter multiple traffic flows.
 Port Lists - Finally, you need to specify the ports for the ACL.