Click the radio button that corresponds to the desired criteria of the ACE in the Destination MAC Address area.Īny - All destination MAC addresses apply to the ACE. Note: You can click Edit to navigate to and create a time range on the Time Range page. (Optional) From the Time Range Name drop-down list, choose a time range to apply to the ACE. Time ranges are used to limit the amount of time an ACE is in effect. (Optional) Check the Enable Time Range check box to allow a time range to be configured to the ACE. Note: Disabled ports can be reactivated on the Port Settings page. Shutdown - The switch drops packets that do not meet the required criteria of the ACE and disables the port where the packets were received. Permit - The switch forwards packets that meet the required criteria of the ACE.ĭeny - The switch drops packets that meet the required criteria of the ACE. Click the radio button that corresponds to the desired action that is taken when a frame meets the required criteria of the ACE. (Optional) Check the Enable Logging check box to enable logging ACL flows that match the ACL rule. ACEs with a higher priority value are processed first. Enter the priority value for the ACE in the Priority field. Note: The ACL Name field displays the name of the ACL. Click the Add button to add a new rule to the ACL.
Note: The ACEs that are already configured for the ACL will be displayed in the table. Choose an ACL from the ACL Name drop-down list then click Go. Important: To fully utilize the available features and functions of the switch, change to Advanced mode by choosing Advanced from the Display Mode drop-down list in the upper-right corner of the page. On the web-based utility, go to Access Control > MAC-Based ACE. Note: This default action can be avoided by the creation of a low priority ACE that permits all traffic. In this scenario, an ACE will be created to deny traffic that is sent from a specific user-defined source MAC address to any destination addresses. If no match is found to any ACE in all relevant ACLs, the frame is dropped by default. If the frame matches none of the ACE filters, the next ACL is processed. If the frame matches an ACE filter of the first ACL, the ACE action takes place. When a frame is received on a port, the switch processes the frame through the first ACL. You should now have configured a MAC-based ACL on your switch. (Optional) Click Save to save settings in the startup configuration file. Enter the name of the new ACL in the ACL Name field. Log in to the web-based utility then go to Access Control > MAC-Based ACL.
SWITCH CONTROLLER FOR MAC SERIES
Sx550X Series | 2.2.0.66 ( Download latest)Ĭonfigure MAC-Based ACL and ACE Configure MAC-Based ACL.
SWITCH CONTROLLER FOR MAC HOW TO
This article provides instructions on how to configure MAC-based ACL and ACE on your Managed Switch. If you do not configure access lists on your network devices, all packets passing through the switch or router could be allowed onto all parts of your network. You should use access lists to provide a basic level of security for accessing your network. Once the ACE is created, it is applied to an ACL. An Access Control Entry (ACE) contains the actual access rule criteria. However, packets from LAN to LAN port will not be checked. It then uses the matched results to permit or deny this packet. If a packet is coming from a wireless access point to a Local Area Network (LAN) port or vice versa, this device will check if the source MAC address of the packet matches any entry in this list and checks the ACL rules against the content of the frame. Media Access Control (MAC)-based Access Control List (ACL) is a list of source MAC addresses that use Layer 2 information to permit or deny access to traffic. An ACL contains the hosts that are permitted or denied access to the network device. It blocks or allows users to access specific resources. An Access Control List (ACL) is a list of network traffic filters and correlated actions used to improve security.
0 kommentar(er)
