User Manual

Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power
Manage Switch Security User Manual325
• ACL Based on Destination IPv4 L4 Port. Creates an ACL based on the destination
IPv4 Layer 4 port number.
• ACL Based on Source IPv4 L4 Port. Creates an ACL based on the source IPv4
Layer 4 port number.
• ACL Based on Destination IPv6 L4 Port. Creates an ACL based on the destination
IPv6 Layer 4 port number.
• ACL Based on Source IPv6 L4 Port. Creates an ACL based on the source IPv6
Layer 4 port number.
Note: For L4 port options, two rules are created (one for TCP and one for
UDP).
8. In the Sequence Number field, enter a whole number in the range of 1 to 2147483647 that
is used to identify the rule.
9. From the Action menu, select Permit or Deny to specify the action that must be taken if a
packet matches the rule’s criteria.
If a packet matches a rule with a permit action, the packet is allowed to continue toward
its destination. If a packet matches a rule with a deny action, the packet is dropped.
10. From the Match Every menu, select one of the following options:
• False. Signifies that packets do not need to match the selected ACL and rule. With
this selection, you can add a destination MAC address, destination MAC mask, and
VLAN.
• True. Signifies that all packets must match the selected ACL and rule and are either
permitted or denied. In this case, since all packets match the rule, you cannot
configure other match criteria.
11. Specify the additional match criteria for the selected ACL type.
The rest of the rule match criteria fields available for configuration depend on the selected
ACL type. For information about the possible match criteria fields, see the following table.
ACL Based On Fields
Destination MAC
• Destination MAC. Specify the destination MAC address to compare against
an Ethernet frame. The valid format is xx:xx:xx:xx:xx:xx. The BPDU keyword
might be specified using a destination MAC address of 01:80:C2:xx:xx:xx.
• Destination MAC Mask. Specify the destination MAC address mask, which
represents the bits in the destination MAC address to compare against an
Ethernet frame. The valid format is xx:xx:xx:xx:xx:xx. The BPDU keyword
might be specified using a destination MAC mask of 00:00:00:ff:ff:ff.
• VLAN. Specify the VLAN ID to match within the Ethernet frame.
Source MAC
• Source MAC. Specify the source MAC address to compare against an
Ethernet frame. The valid format is xx:xx:xx:xx:xx:xx.
• Source MAC Mask. Specify the source MAC address mask, which
represents the bits in the source MAC address to compare against an
Ethernet frame. The valid format is (xx:xx:xx:xx:xx:xx).
• VLAN. Specify the VLAN ID to match within the Ethernet frame.