NETGEAR AV Line M4250 GSM4210PX 8-Port Gigabit PoE+ Compliant Managed AV Switch with SFP (220W) - Manual (Page 648)

Note: The steps in this procedure describe creating an ACL based on the destination
MAC address. If you select a different ACL type, for example, ACL based on a source
IPv4, then what is shown on this page varies, depending on the current step in the
rule configuration process.
6. From the ACL Type menu, select the type of ACL.
You can select from the following ACL types:
• ACL Based on Destination MAC: Creates an ACL based on the destination MAC
address, destination MAC mask, and VLAN.
• ACL Based on Source MAC: Creates an ACL based on the source MAC address,
source MAC mask, and VLAN.
• ACL Based on Destination IPv4: Creates an ACL based on the destination IPv4
address and IPv4 address mask.
• ACL Based on Source IPv4: Creates an ACL based on the source IPv4 address
and IPv4 address mask.
• ACL Based on Destination IPv6: Creates an ACL based on the destination IPv6
prefix and IPv6 prefix length.
• ACL Based on Source IPv6: Creates an ACL based on the source IPv6 prefix and
IPv6 prefix length.
• ACL Based on Destination IPv4 L4 Port: Creates an ACL based on the destination
IPv4 Layer 4 port number.
• ACL Based on Source IPv4 L4 Port: Creates an ACL based on the source IPv4
Layer 4 port number.
• ACL Based on Destination IPv6 L4 Port: Creates an ACL based on the destination
IPv6 Layer 4 port number.
• ACL Based on Source IPv6 L4 Port: Creates an ACL based on the source IPv6
Layer 4 port number.
Note: For L4 port options, two rules are created (one for TCP and one for UDP).
7. In the Sequence Number field, enter a whole number in the range from 1 to
2147483647 that is used to identify the rule.
8. From the Action menu, select Permit or Deny to specify the action that must be
taken if a packet matches the rule’s criteria.
9. From the Match Every menu, select one of the following options:
• False: Packets do not need to match the selected ACL and rule. With this selection,
you can add a destination MAC address, destination MAC mask, and VLAN.
• True: All packets must match the selected ACL and rule and are either permitted
or denied. In this case, since all packets match the rule, the option of configuring
other match criteria is not offered.
Main User Manual 648 Manage Switch Security
AV Line of Fully Managed Switches M4250 Series Main User Manual