Cambium Networks cnMatrix EX2028 Handleiding (320 Pagina's)

Handleiding

/ 320

Je bekijkt pagina 260 van 320

Security Features 260

l

For information regarding port trust/untrust status:

cnMatrix# show ip dhcp snooping port-security-state

l

For dhcp snooping status:

cnMatrix# show ip dhcp snooping globals

l

For feature debugging:

cnMatrix# debug ip dhcp snooping all

Access Control List (ACL)

Managing ACL

TheACL feature provides the means for the user to create rules to match specific traffic based on the

information in the packets. The packets matched by the rules can then be dropped, allowed, or

redirected, or they can be fed to the QoS engine to have them policed. Matched packets can be mirrored

to a specific interface for them to be analyzed by a network administrator.

An ACL consists of three parts:

l

Rule – a set of fields from the packet, and a set of values that the selected fields must match.

l

Action – what to do with the packets that match the rule (permit, deny, redirect).

l

Interface -where the rule is applied (on ingress or egress direction).

There are three types of ACLs:

l

IP ACLs – the rule can consist of the source IP and the destination IP

l

MAC ACLs – the rule can consist of the source and destination MAC addresses, Ethernet type and

the VLAN information

l

IP extended ACLs – the rule can consist of the source IP and the destination IP, as well as Layer-4

information for protocols such as UDP (source/destination ports), TCP (ports, TCP flags), ICMP

(message code, message type) or any IP type, specified by the IP protocol number, as defined by

the Internet Assigned Numbers Authority (IANA).

There are two modes of configuring the ACL feature:

Consolidated User configures the entire set of rules, then commit them to the hardware.

Immediate User configures the rules, and they are committed to hardware one-by-one, as the

user inputs them. In the immediate mode, the priorities assigned by the users are

ignored by the switch and are assigned in the order in which they are configured. This

mode is not recommended for scenarios with complex rules, in which priorities are

relevant.The default mode is immediate.

Standards

N/A

Scaling Numbers

/ 320

Bekijk gratis de handleiding van Cambium Networks cnMatrix EX2028, stel vragen en lees de antwoorden op veelvoorkomende problemen, of gebruik onze assistent om sneller informatie in de handleiding te vinden of uitleg te krijgen over specifieke functies.