2 acl configuration task list, Onfiguration – QTECH QSW-3400 Инструкция по настройке User Manual
Page 301
+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
300
An access-list can consist of several rules. Filtering of packets compares packet
conditions to the rules, from the first rule to the first matched rule; the rest of the rules
will not be processed. Global default action applies only to IP packets in the incoming
direction on the ports.
Global default action applies only when packet flirter is enabled on a port and no ACL
is bound to that port, or no binding ACL matches.
39.2 ACL Configuration Task List
ACL Configuration Task Sequence:
1. Configuring access-list
(1) Configuring a numbered standard IP access-list
(2) Configuring a numbered extended IP access-list
(3) Configuring a standard IP access-list based on nomenclature
1) Create a standard IP access-list based on nomenclature
2)
Specify multiple “permit” or “deny” rule entries
3) Exit ACL Configuration Mode
(4) Configuring an extended IP access-list based on nomenclature
1) Create an extensive IP access-list based on nomenclature
2)
Specify multiple “permit” or “deny” rule entries
3) Exit ACL Configuration Mode
(5) Configuring a numbered standard MAC access-list
(6) Configuring a numbered extended MAC access-list
(7) Configuring a extended MAC access-list based on nomenclature
1) Create a extensive MAC access-list based on nomenclature
2)
Specify multiple “permit” or “deny” rule entries
3) Exit ACL Configuration Mode
(8) Configuring a numbered extended MAC-IP access-list
(9) Configuring a extended MAC-IP access-list based on nomenclature
1) Create a extensive MAC-IP access-list based on nomenclature
2)
Specify multiple “permit” or “deny” rule entries
3) Exit MAC-IP Configuration Mode
(10)
Configuring a numbered standard IPv6 access-list
(11)
Configuring a standard IPv6 access-list based on nomenclature
1) Create a standard IPv6 access-list based on nomenclature
2) Specify multiple permit or deny rule entries
3) Exit ACL Configuration Mode
2. Configuring the packet filtering function