3com 3CRWX120695A WXR100 Manual De Usuario
220
C
HAPTER
6: C
ONFIGURING
WX S
YSTEM
P
ARAMETERS
By default, all addresses except the host address of the VLAN, the
network broadcast address, and the subnet broadcast address are
included in the range. If you specify the range, the start address must be
lower than the stop address, and all addresses must be in the same
subnet. The IP interface of the VLAN must be within the same subnet but
is not required to be within the range.
network broadcast address, and the subnet broadcast address are
included in the range. If you specify the range, the start address must be
lower than the stop address, and all addresses must be in the same
subnet. The IP interface of the VLAN must be within the same subnet but
is not required to be within the range.
6 Click OK.
Changing the Aging
Time for FDB Entries
The aging timeout period specifies how long a dynamic entry can remain
unused before the software removes the entry from the database.
unused before the software removes the entry from the database.
1 Access the VLAN table:
a Select the Configuration tool bar option.
b In the Organizer panel, click the plus sign next to the WX switch.
c Click the plus sign next to System.
d Select VLANs.
2 In the Content panel, select the VLAN.
3 Click Properties.
4 In the Aging Time box, specify the aging timeout period (0 to 1,000,000
seconds) for dynamic entries in the forwarding database. The default is
300 seconds (5 minutes). If you specify 0, aging is disabled.
300 seconds (5 minutes). If you specify 0, aging is disabled.
5 Click OK.
Viewing and
Configuring ACLs
Configuring ACLs
An access control list (ACL) filters packets to restrict or permit network
usage by certain users, network devices, or traffic types. You can also
assign a class of service (CoS) level, which allows priority handling, to
packets. For example, you can use ACLs to enable users to send and
receive packets within an intranet, but restrict incoming packets to the
server that stores confidential salary information.
usage by certain users, network devices, or traffic types. You can also
assign a class of service (CoS) level, which allows priority handling, to
packets. For example, you can use ACLs to enable users to send and
receive packets within an intranet, but restrict incoming packets to the
server that stores confidential salary information.
An ACL is an ordered list of access control entries (ACEs)—rules that
specify how to handle packets. The rule consists of a filter and an action.
When a packet matches the filter, the action is applied to the packet.
specify how to handle packets. The rule consists of a filter and an action.
When a packet matches the filter, the action is applied to the packet.
If there are no ACE matches in the ACL, an ACL contains an implicit rule
that denies all access. If there is not at least one ACE that permits access
in an ACL, no traffic will be allowed. The implicit “deny all” rule is always
the last ACE of an ACL.
that denies all access. If there is not at least one ACE that permits access
in an ACL, no traffic will be allowed. The implicit “deny all” rule is always
the last ACE of an ACL.