Interlogix NS3502-8P-2S User Manual - Manual (Page 549)

IFS NS3502-8P-2S User Manual
549
APPENDEX B: GLOSSARY
A
ACE
ACE is an acronym for Access Control Entry. It describes access permission associated with a
particular ACE ID.
There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit
and deny). The ACE also contains many detailed, different parameter options that are available
for individual application.
ACL
ACL is an acronym for Access Control List. It is the list table of ACEs, containing access control
entries that specify individual users or groups permitted or denied to specific traffic objects,
such as a process or a program.
Each accessible traffic object contains an identifier to its ACL. The privileges determine whether
there are specific traffic object access rights.
ACL implementations can be quite complex, for example, when the ACEs are prioritized for the
various situation. In networking, the ACL refers to a list of service ports or network services that
are available on a host or server, each with a list of hosts or servers permitted or denied to use
the service. ACL can generally be configured to control inbound traffic, and in this context, they
are similar to firewalls.
There are 3 web-pages associated with the manual ACL configuration:
ACL|Access Control List: The web page shows the ACEs in a prioritized way, highest (top) to
lowest (bottom). Default the table is empty. An ingress frame will only get a hit on one ACE
even though there are more matching ACEs. The first matching ACE will take action
(permit/deny) on that frame and a counter associated with that ACE is incremented. An ACE can
be associated with a Policy, 1 ingress port, or any ingress port (the whole switch). If an ACE
Policy is created then that Policy can be associated with a group of ports under the "Ports"
web-page. There are number of parameters that can be configured with an ACE. Read the Web
page help text to get further information for each of them. The maximum number of ACEs is 64.
ACL|Ports: The ACL Ports configuration is used to assign a Policy ID to an ingress port. This is
useful to group ports to obey the same traffic rules. Traffic Policy is created under the "Access
Control List" - page. You can you also set up specific traffic properties (Action / Rate Limiter /