Defining Mac-Based Acls - Dell PowerConnect 3324 User Manual

Modifying an IP-based ACE:
1. Open the Add ACE to IP Based ACL page.
2. Click Show All.The ACEs Associated with IP-ACL page opens.
3. Modify the ACL Name, New Ace Priority, Protocol, Source and Destination Port, Source and Destination IP Address, Match DSCP or Match IP
Precedence, and Action fields.
4. Click Apply Changes. The IP-based ACEs is modified, and the device is updated.
Removing ACLs:
1. Open the Add ACE to IP Based ACL page.
2. Click Show All.The ACEs Associated with IP-ACL page opens.
3. Select an ACL.
4. Check the Remove ACL check box.
5. Click Apply Changes. The IP-based ACL is removed, and the device is updated.
Removing ACEs:
1. Open the Add ACE to IP Based ACL page.
2. Click Show All.The ACEs Associated with IP-ACL page opens.
3. Select an ACE.
4. Check the Remove check box.
5. Click Apply Changes. The IP-based ACE is removed, and the device is updated.
Assigning IP-based ACEs to ACLs Using the CLI Commands
The following table summarizes the equivalent CLI commands for assigning IP-based ACEs to ACLs as displayed in the Add ACE to IP Based ACL page.
CLI Command
ip access-list name
permit {any | protocol} {any | {source source-wildcard}} {any | {destination destination-
wildcard}} [dscp dscp number | ip-precedence ip-precedence]
deny [disable-port] {any| protocol} {any | {source source-wildcard}} {any | {destination
destination-wildcard}} [dscp dscp number | ip-precedence ip-precedence]
The following is an example of the CLI commands:
Permit 00:00:bo:11:11:11 0:0:0:0:0:0 any VLAN 4
deny 00:00:bo:11:11:11 0:0:0:0:0:0 any VLAN 4

Defining MAC-Based ACLs

The Add ACE to MAC Based ACL page allows network administrators to define MAC-based Access Control Entry (ACE) and Access Control Lists (ACLs). ACEs
act as filters to match packets to forwarding criteria. To open the Add ACE to MAC Based ACL:
Select Switch > Network Security > MAC Based ACL. The Add ACE to MAC Based ACL page opens.
l
Description
Enters to IP-Access list configuration mode.
Allows traffic if the conditions defined in the
permit statement are matched.
Denies traffic if the conditions defined in the
deny statement are matched.