LevelOne GTL-2691 - Manual (Page 366)

C HAPTER 13 | Security Measures
Access Control Lists
– 366 –
◆ Packet Format – This attribute includes the following packet types:
■
Any – Any Ethernet packet type.
■
Untagged-eth2 – Untagged Ethernet II packets.
■
Untagged-802.3 – Untagged Ethernet 802.3 packets.
■
tagged-eth2 – Tagged Ethernet II packets.
■
Tagged-802.3 – Tagged Ethernet 802.3 packets.
◆ VID – VLAN ID. (Range: 1-4094)
◆ VID Bit Mask – VLAN bit mask. (Range: 0-4095)
◆ Ethernet Type – This option can only be used to filter Ethernet II
formatted packets. (Range: 600-ffff hex.)
A detailed listing of Ethernet protocol types can be found in RFC 1060.
A few of the more common types include 0800 (IP), 0806 (ARP), 8137
(IPX).
◆ Ethernet Type Bit Mask – Protocol bit mask. (Range: 600-ffff hex.)
◆ Time Range – Name of a time range.
W EB I NTERFACE
To add rules to a MAC ACL:
1.
Click Security, ACL.
2.
Select Configure ACL from the Step list.
3.
Select Add Rule from the Action list.
4.
Select MAC from the Type list.
5.
Select the name of an ACL from the Name list.
6.
Specify the action (i.e., Permit or Deny).
7. Select the address type (Any, Host, or MAC).
8.
If you select “Host,” enter a specific address (e.g., 11-22-33-44-55-
66). If you select “MAC,” enter a base address and a hexadecimal bit
mask for an address range.
9.
Set any other required criteria, such as VID, Ethernet type, or packet
format.
10. Click Apply.