146
10.2.5 Extend-IP ACL
Extend-IP ACLs analyze and process data packets based on a series of match conditions, which
can be the source IP addresses, destination IP addresses, IP protocol and other information of this
sort carried in the packets.
Choose the menu ACL→ACL Config→Extend-IP ACL to load the following page.
Figure
10-8 Create Extend-IP Rule
The following entries are displayed on this screen:
¾ Create Extend-IP ACL
ACL ID: Select the desired Extend-IP ACL for configuration.
Rule ID: Enter the rule ID.
Operation: Select the operation for the switch to process packets which match the
rules.
z Permit: Forward packets.
z Deny: Discard Packets.
Fragment: Select if the rule will take effect on the fragment packets. When the
fragment is selected, this rule will process all the fragments and the
last piece of fragment will be always forwarded.
S-IP: Enter the source IP address contained in the rule.
D-IP: Enter the destination IP address contained in the rule.