Netgear S3300-28X (GS728TX) - ProSAFE S3300 Smart Switch Series Guia Do Administrador
Managing Device Security
257
S3300 Smart Switch
all of the bits are important. Wildcard masking for ACLs operates differently from a
subnet mask. A wildcard mask is in essence the inverse of a subnet mask. For
example, to apply the rule to all hosts in the 192.168.1.0/24 subnet, enter 0.0.0.255 in
the Source IP Mask field. This field is required when you configure a source IP
address.
subnet mask. A wildcard mask is in essence the inverse of a subnet mask. For
example, to apply the rule to all hosts in the 192.168.1.0/24 subnet, enter 0.0.0.255 in
the Source IP Mask field. This field is required when you configure a source IP
address.
6.
Click the Apply button.
To modify the match criteria for an ACL rule:
1.
From the ACL Name list on the IP Rules screen, select the ACL that includes the rule to
update.
update.
2.
In the Basic ACL Rule Table, click the rule ID.
The rule ID is a hyperlink to the Standard ACL Rule Configuration screen.
3.
Modify the ACL rule information.
4.
Click the Apply button.
To delete and IP ACL rule:
1.
In the Basic ACL Rule Table on the IP Rules screen, select the check box associated
with the rule to remove.
with the rule to remove.
2.
Click the Delete button.
IP Extended Rules
Use the IP Extended Rules screen to define rules for IP-based extended ACLs. The access
list definition includes rules that specify whether traffic matching the criteria is forwarded
normally or discarded.
list definition includes rules that specify whether traffic matching the criteria is forwarded
normally or discarded.
Note:
There is an implicit deny all rule at the end of an ACL list. This means
that if an ACL is applied to a packet and if none of the explicit rules
match, then the final implicit deny all rule applies and the packet is
dropped.
that if an ACL is applied to a packet and if none of the explicit rules
match, then the final implicit deny all rule applies and the packet is
dropped.
To add rules to an IP ACL:
1.
Select Security
ACL > Advanced
IP Extended Rules.
2.
In the ACL ID/Name list, select the ACL to add the rule to.
3.
Click the Add button.
The screen displays the extended ACL rule configuration fields.