Netgear M5300-28G-POE+ (GSM7228PSv1h2) - 12-Port Managed Gigabit Switch Ratgeber Für Administratoren

Seite von 542
168
   
|    
Chapter 10.  ACLs 
 
ProSafe Managed Switch 
1. 
Create an IP access control list with the name monitorHost.
2. 
Define the rules to match host 10.0.0.1 and to permit all others.
3. 
Bind the ACL with interface 1/0/1. 
4. 
View the configuration.
Web Interface: Configure ACL Mirroring
1. 
Create an IP access control list with the name monitorHost on the switch.
(Netgear Switch) (Config)# ip access-list monitorHost
(Netgear Switch) (Config-ipv4-acl)# permit ip 10.0.0.1 0.0.0.0 any mirror 1/0/19
(Netgear Switch) (Config-ipv4-acl)# permit every
(Netgear Switch) (Interface 1/0/1)#ip access-group monitorHost in 1
(Netgear Switch) # show ip access-lists
Current number of ACLs: 1  Maximum number of ACLs: 100
ACL ID/Name          Rules  Direction      Interface(s)        VLAN(s)
-------------------  -----  ----------    ------------------   ---------------
monitorHost           2      inbound       1/0/1
(Netgear Switch)  #show ip access-lists monitorHost
   ACL Name: monitorHost
   Inbound Interface(s): 1/0/1
   Rule Number: 1
   Action......................................... permit
   Match All...................................... FALSE
   Protocol....................................... 255(ip)
   Source IP Address.............................. 10.0.0.1
   Source IP Mask................................. 0.0.0.0
   Mirror Interface............................... 1/0/19
   Rule Number: 2
   Action......................................... permit
   Match All...................................... TRUE