Netgear M4200-10MG-PoE+ (GSM4210P) - Multigigabit Managed Switch with 8*2.5G and 2x10G SFP+ Layer 3 관리자 가이드

다운로드
페이지 688
ACLs 
212
Managed Switches 
4. 
Insert a new ACL rule at a particular position. For example, insert a new ACL rule with 
sequence number 900 at the first position. The new rule drops all packets that arrive from IP 
address 192.168.1.1.
Configure a Management ACL
A management ACL lets you control access to the switch. You can permit specific hosts to 
access the switch and deny access to all other hosts. You can also specify a specific access 
method for a permitted host. For example, you can specify that a host can access the switch 
over a Telnet connection only
(Netgear Switch) #config
(Netgear Switch) (Config)#ip access-list voice_acl
(Netgear Switch) (Config-ipv4-acl)#900 deny ip 192.168.1.1 255.255.255.0 any
(Netgear Switch) (Config-ipv4-acl)#exit
(Netgear Switch) (Config)#exit
(Netgear Switch) #show ip access-lists voice_acl
ACL Name: voice_acl
Sequence Number: 900
Action......................................... deny
Match All...................................... False
Protocol....................................... 255(ip)
Source IP Address.............................. 192.168.1.1
Source IP Wildcard Mask........................ 255.255.255.0
Sequence Number: 1000
Action......................................... permit
Match All...................................... False
Protocol....................................... 255(ip)
IP DSCP........................................ 40(cs5)
Sequence Number: 1100
Action......................................... permit
Match All...................................... False
Protocol....................................... 255(ip)
IP DSCP........................................ 46(ef)
Sequence Number: 1200
Action......................................... deny
Match All...................................... TRUE