Netgear M4200-10MG-PoE+ (GSM4210P) - Multigigabit Managed Switch with 8*2.5G and 2x10G SFP+ Layer 3 관리자 가이드
ACLs
212
Managed Switches
4.
Insert a new ACL rule at a particular position. For example, insert a new ACL rule with
sequence number 900 at the first position. The new rule drops all packets that arrive from IP
address 192.168.1.1.
sequence number 900 at the first position. The new rule drops all packets that arrive from IP
address 192.168.1.1.
Configure a Management ACL
A management ACL lets you control access to the switch. You can permit specific hosts to
access the switch and deny access to all other hosts. You can also specify a specific access
method for a permitted host. For example, you can specify that a host can access the switch
over a Telnet connection only
method for a permitted host. For example, you can specify that a host can access the switch
over a Telnet connection only
(Netgear Switch) #config
(Netgear Switch) (Config)#ip access-list voice_acl
(Netgear Switch) (Config-ipv4-acl)#900 deny ip 192.168.1.1 255.255.255.0 any
(Netgear Switch) (Config-ipv4-acl)#exit
(Netgear Switch) (Config)#exit
(Netgear Switch) #show ip access-lists voice_acl
ACL Name: voice_acl
Sequence Number: 900
Action......................................... deny
Match All...................................... False
Protocol....................................... 255(ip)
Source IP Address.............................. 192.168.1.1
Source IP Wildcard Mask........................ 255.255.255.0
Sequence Number: 1000
Action......................................... permit
Match All...................................... False
Protocol....................................... 255(ip)
IP DSCP........................................ 40(cs5)
Sequence Number: 1100
Action......................................... permit
Match All...................................... False
Protocol....................................... 255(ip)
IP DSCP........................................ 46(ef)
Sequence Number: 1200
Action......................................... deny
Match All...................................... TRUE