Netgear M5300-28G-POE+ (GSM7228PSv1h2) - 12-Port Managed Gigabit Switch Softwarehandbuch
Manage Device Security
665
M6100, M5300, and M7100 Series Managed Switches
DSCP keywords from the list. If a value is to be selected by specifying its numeric
value, then select Other and a field displays where you can enter numeric value of
the DSCP.
value, then select Other and a field displays where you can enter numeric value of
the DSCP.
•
IP Precedence
. The IP Precedence field in a packet is defined as the high-order
three bits of the service type octet in the IP header. This is an optional configuration.
Enter an integer from 0 to 7.
Enter an integer from 0 to 7.
•
IP TOS
. The IP TOS field in a packet is defined as all 8 bits of the service type octet in
the IP header. The TOS Bits value is a hexadecimal number from 00 to 09 and to aa
to ff. The ToS mask value is a hexadecimal number from 00 to FF. The ToS mask
denotes the bit positions in the TOS Bits value that are used for comparison against
the IP TOS field in a packet. For example, to check for an IP ToS value having bits 7
and 5 set and bit 1 clear, where bit 7 is most significant, use a TOS Bits value of 0xA0
and a TOS Mask of 0xFF. This is an optional configuration.
to ff. The ToS mask value is a hexadecimal number from 00 to FF. The ToS mask
denotes the bit positions in the TOS Bits value that are used for comparison against
the IP TOS field in a packet. For example, to check for an IP ToS value having bits 7
and 5 set and bit 1 clear, where bit 7 is most significant, use a TOS Bits value of 0xA0
and a TOS Mask of 0xFF. This is an optional configuration.
33.
Rate Limit Conform Data Rate
- Specify the conforming data rate of IP ACL rule.
Valid values are 1 to 4294967295 in Kbps.
34.
Rate Limit Burst Size
- Specify the burst size of the IP ACL rule. Valid values are 1 to 128
in Kbytes.
35.
Time Range
- Name of the time range associated with the IP extended ACL rule.
The Rule Status field displays if the ACL rule is active or inactive. Blank means that no
timer schedules are assigned to the rule.
timer schedules are assigned to the rule.
36.
To modify an existing IP extended ACL rule, click the Rule ID.
The number is a hyperlink to the Extended ACL Rule Configuration 100-199 screen. Click
the Add button on the IP Extended Rules screen.
the Add button on the IP Extended Rules screen.
37.
For standard ACL Rule Configuration (1–99), click the Add button on the IP Rules screen.
38.
To delete an IP ACL rule, select the rule’s check box, and then click the Delete button.
Configure IPv6 ACL
An IP or IPv6 ACL consists of a set of rules that are matched sequentially against a packet.
When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is
taken, and the additional rules are not checked for a match. On this screen the interfaces to
which an IP ACL applies must be specified, as well as whether it applies to inbound or
outbound traffic.
taken, and the additional rules are not checked for a match. On this screen the interfaces to
which an IP ACL applies must be specified, as well as whether it applies to inbound or
outbound traffic.
To configure IPv6 ACL:
1.
Prepare your computer with a static IP address in the 169.254.100.0 subnet, for
example, 169.254.100.201.
2.
Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on
the switch.
3.
Launch a web browser.
4.
Enter the IP address of the switch in the web browser address field.
The default IP address of the switch is 169.254.100.100.