TP-LINK TL-SG3424P User Manual

Page of 263
 
Chapter 11  ACL 
ACL (Access Control List) is used to filter packets by configuring match rules and process policies 
of packets in order to control the access of the illegal users to the network. Besides, ACL functions 
to control traffic flows and save network resources. It provides a flexible and secured access 
control policy and facilitates you to control the network security. 
On this switch, ACLs classify packets based on a series of match conditions, which can be L2-L4 
protocol key fields carried in the packets. A time-range based ACL enables you to implement ACL 
control over packets by differentiating the time-ranges. 
The ACL module is mainly for ACL configuration of the switch, including four submenus: 
Time-Range
ACL Config, Policy Config and Policy Binding
11.1 Time-Range 
If a configured ACL is needed to be effective in a specified time-range, a time-range should be 
firstly specified in the ACL. As the time-range based ACL takes effect only within the specified 
time-range, data packets can be filtered by differentiating the time-ranges. 
On this switch absolute time, week time and holiday can be configured. Configure an absolute time 
section in the form of “the start date to the end date” to make ACLs effective; configure a week time 
section to make ACLs effective on the fixed days of the week; configure a holiday section to make 
ACLs effective on some special days. In each time-range, four time-slices can be configured.   
The Time-Range configuration can be implemented on Time-Range Summary,  Time-Range 
Create 
and Holiday Config pages. 
11.1.1  Time-Range Summary 
On this page you can view the current time-ranges.   
Choose the menu ACL→Time-Range→Time-Range Summary to load the following page. 
 
Figure 11-1 Time-Range Table 
The following entries are displayed on this screen: 
¾
 
Time-Range Table 
Select: 
Select the desired entry to delete the corresponding time-range. 
Index: 
Displays the index of the time-range. 
Time-Range Name: 
Displays the name of the time-range. 
Slice: 
Displays the time-slice of the time-range. 
Mode: 
Displays the mode the time-range adopts. 
Operation: 
Click Edit to modify this time-range and click Detail to display the 
complete information of this time–range. 
 
137