NETGEAR S3300-28X (GS728TX) 24x1GE - Инструкция по эксплуатации - Страница 282

Managing Device Security 

282

S3300 Smart Managed Pro Switch 

subnet mask. A wildcard mask is in essence the inverse of a subnet mask. For 
example, to apply the rule to all hosts in the 192.168.1.0/24 subnet, enter 0.0.0.255 in 
the Source IP Mask field. This field is required when you configure a source IP 
address.

6. 

Click the 

Apply

 button.



To modify the match criteria for an ACL rule:

1. 

From the ACL Name list on the IP Rules screen, select the ACL that includes the rule to 
update.

2. 

In the Basic ACL Rule Table, click the rule ID.

The rule ID is a hyperlink to the Standard ACL Rule Configuration screen.

3. 

Modify the ACL rule information.

4. 

Click the 

Apply

 button.



To delete and IP ACL rule:

1. 

In the Basic ACL Rule Table on the IP Rules screen, select the check box associated 
with the rule to remove.

2. 

Click the 

Delete

 button.

IP Extended Rules

Use the IP Extended Rules

screen to define rules for IP-based extended ACLs. The access 

list definition includes rules that specify whether traffic matching the criteria is forwarded 
normally or discarded.

Note:

There is an implicit 

deny all

 rule at the end of an ACL list. This means 

that if an ACL is applied to a packet and if none of the explicit rules 
match, then the final implicit deny all rule applies and the packet is 
dropped.



To add rules to an IP ACL:

1. 

Select 

Security 

>

 ACL

 > 

Advanced 

>

 IP Extended Rules

. 

2. 

In the ACL ID/Name list, select the ACL to add the rule to.

3. 

Click the 

Add

 button. 

The screen displays the extended ACL rule configuration fields.