ProCurve 6200yl User's Guide download pdf (Page 299)

100

101

10-13

Access Control Lists (ACLs)

Terminology

Named ACL: An ACL created with the ip access-list < extended | standard >

< name-str > command and then populated using the < deny | permit >

command in the Named ACL (nacl) CLI context. (Refer to “Entering the

“Named ACL” (nacl) Context” on page 10-53.)

Numbered ACL: An ACL created and initially populated by using the access-

list < 1-99 | 100 - 199 > command. (Refer to “Creating or Adding to a Standard,

Numbered ACL” on page 10-57.) After a numbered ACL has been created,

the switch manages it in the same way as a named ACL, meaning that it

can be applied and edited in the same way as a named ACL.

Outbound Traffic: For defining the points where the switch applies an RACL

to filter IP traffic, outbound traffic is routed IP traffic leaving the switch

through a VLAN interface (or a subnet in a multinetted VLAN). “Outbound

traffic” can also apply to switched IP traffic leaving the switch on a VLAN

interface, but VACLs do not filter outbound switched IP traffic. (Refer also

to “ACL Applications” on page 10-15.)

Permit: An ACE configured with this action allows the switch to forward a

routed IP packet for which there is a match within an applicable ACL.

Permit Any Forwarding: An ACE configured with this action causes the

switch to forward all routed IP packets that have not been permitted or

denied by earlier ACEs in the list. In a standard ACL, this is permit any. In

an extended ACL, it is permit ip any any.

RACL: See “Routed ACL”.

RADIUS-Assigned ACL: See “Dynamic Port ACL”.

remark-str: The term used in ACL syntax statements to represent the variable

“remark string”; a set of alphanumeric characters you can include in a

remark in an ACL. A remark string can include up to 100 characters and

must be delimited by single or double quotes if any spaces are included

in the string.

Routed ACL (RACL): An ACL applied to routed IP traffic that is entering or

leaving the switch on a given VLAN. See also “Access Control List”.

SA: The acronym for Source IP Address. In an IP packet, this is the source IP

address carried in the IP header, and identifies the packet’s sender. In a

standard ACE, this is the IP address used by the ACE to determine whether

there is a match between a packet and the ACE. In an extended ACE, this

is the first of two IP addresses used by the ACE to determine whether

there is a match between a packet and the ACE. See also “DA”.

1 2 ... 294 295 296 297 298 299 300 301 302 303 304 ... 595 596

Comments to this Manuals

No comments

ProCurve 6200yl User's Guide Page 299

Comments to this Manuals

Related products and manuals for Network switches ProCurve 6200yl