QTECH QSW-2800 Инструкция по настройке - Manual (Page 277)

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
263
An access-list can consist of several rules. Filtering of packets compares packet conditions to
the rules, from the first rule to the first matched rule; the rest of the rules will not be processed.
Global default action applies only to IP packets in the incoming direction on the ports.
Global default action applies only when packet flirter is enabled on a port and no ACL is bound
to that port, or no binding ACL matches.
37.2 ACL Configuration Task List
ACL Configuration Task Sequence:
1. Configuring access-list
(1) Configuring a numbered standard IP access-list
(2) Configuring a numbered extended IP access-list
(3) Configuring a standard IP access-list based on nomenclature
Create a standard IP access-list based on nomenclature
Specify multiple “permit” or “deny” rule entries
Exit ACL Configuration Mode
(4) Configuring an extended IP access-list based on nomenclature
Create an extensive IP access-list based on nomenclature
Specify multiple “permit” or “deny” rule entries
Exit ACL Configuration Mode
(5) Configuring a numbered standard MAC access-list
(6) Configuring a numbered extended MAC access-list
(7) Configuring a extended MAC access-list based on nomenclature
Create a extensive MAC access-list based on nomenclature
Specify multiple “permit” or “deny” rule entries
Exit ACL Configuration Mode
(8) Configuring a numbered extended MAC-IP access-list
(9) Configuring a extended MAC-IP access-list based on nomenclature
Create a extensive MAC-IP access-list based on nomenclature
Specify multiple “permit” or “deny” rule entries
Exit MAC-IP Configuration Mode
(10) Configuring a numbered standard IPv6 access-list
(11) Configuring a standard IPv6 access-list based on nomenclature
a) Create a standard IPv6 access-list based on nomenclature
b) Specify multiple permit or deny rule entries
c) Exit ACL Configuration Mode
2. Configuring the packet filtering function
(1) Enable global packet filtering function
(2) Configure default action