beautypg.com

Configure a basic mac acl – NETGEAR MS510TXPP 8 Port Gigabit PoE Managed Switch User Manual

Page 265

background image

Smart Managed Pro Switches MS510TX and MS510TXPP

Manage Device Security

User Manual

265

6.

Select check box for the rule.

7.

Click the

Delete

button and the rule is removed.

ACL Wizard Example

In the following figure, the ACL rule is configured to check for packet matches on ports 4 and
5 and on LAG 2. Only the Inbound option is valid. Packets that include a source address in
the 192.168.4.0/16 network are permitted to be forwarded by the interfaces. All other packets
are dropped because every ACL includes an implicit

deny all

rule as the last rule.

For information about the ACL Wizard, see

Use the ACL Wizard to Create a Simple ACL on

page

260

.

Configure a Basic MAC ACL

A MAC ACL consists of a set of rules that are matched sequentially against a packet. When a

packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken,
and the additional rules are not checked for a match.

Multiple steps are involved in defining a MAC ACL and applying it to the switch:

1.

Create the ACL ID.

2.

Create a MAC rule.

3.

Associate the MAC ACL with one or more interfaces.

You can view or delete MAC ACL configurations in the MAC Binding table (see

View or

Delete MAC ACL Bindings in the MAC Binding Table on page

273

.