Asus GigaX2024SX - Manual (Page 85)

CLI – This example adds two rules:
(1) Accept any incoming packets if the source address is in subnet 10.7.1.x. For
example, if the rule is matched; i.e., the rule (10.7.1.0 & 255.255.255.0) equals
the masked address (10.7.1.2 & 255.255.255.0), the packet passes through.
(2) Allow TCP packets from class C addresses 192.168.1.0 to any destination
address when set for destination TCP port 80 (i.e., HTTP).
(3) Permit all TCP packets from class C addresses 192.168.1.0 with the TCP
control code set to “SYN.”
Configuring a MAC ACL
Command Attribut
Action – An ACL can contain all permit rules or all deny rules.
le
an
s: Any, Host, MAC;
fault: Any)
ess – Source or destination MAC address.
– Hexidecimal mask for source or destination
Ethernet protocol types can be found in RFC 1060. A few of
e more common types include 0800 (IP), 0806 (ARP), 8137 (IPX).
(e.g., 11-22-33-44-55-66). If you select “MAC,”
nter a base address and a hexidecimal bitmask for an address range. Set any
ch as VID or Ethernet type. Then click Add.
es
•
• Source/Destination Address Type – Use “Any” to include all possib
MAC” to specify addresses, “Host” to indicate a specific MAC address, or “
a dress range with the Address and Bitmask fields. (Option
d
e D
• Source/Destination MAC Addr
• Source/Destination Bitmask
MAC address.
• VID – VLAN ID. (Range: 1-4094)
• Ethernet Type – This option can only be used to filter Ethernet II formatted
packets. (Range: 0-65535)
A detailed listing of
th
Web – Specify the action (i.e., Permit or Deny). Specify the source and/or
destination addresses. Select the address type (Any, Host, or MAC). If you select
“Host,” enter a specific address
e
other required criteria, su
3-60