Moxa PT-7528-20MSC-4TX-4GSFP-HV-HV [100/116] Access control list configuration and setup

PT-7528 Series Advanced Settings

4-80

Filter type defines whether the access list will examine packets based on IP or MAC address. This type affects

what detailed rules can be edited. Then, assign the ports you would like to apply the list to. You can also define

Ingress and Egress per port.

After adding a new access control list, you can also create new rules for the access control list. Each ACL group

accepts 10 rules. Rules can filter packets by source and destination IP/MAC address, IP protocol, TCP/UDP Port,

Ethernet Type, and VLAN ID.

After all rules are set, ACL starts to filter the packets by the rule with the highest Priority Index (smaller number,

higher priority). Once a rule denies or accepts its access, the packet will be dropped or passed.

Access Control List Configuration and Setup

Access Control List Settings

Creating an access control list starts at the Access Control List Setting page.

In this page, you can mainly configure two settings:

Add/Modify Access Control List

This function lets you Add a new access control list or Modify an existing access control list. The operation

depends on the Priority Index you select. If the selected priority index is still empty, you can start by creating

a new access control list. Parameters for editing are:

• Priority Index: ACL checking sequence is based on this index. Smaller index numbers have higher priority

for packet filtering. If a packet is filtered by an access list with higher priority, those access lists with lower

priority will not being executed.

Note that Priority Index is not a one-to-one index for each list name. It changes when swapping the priority

of different access control lists.

The maximum Priority Index number is 16

• Name: You can name the access control list in this field. This is the access list’s unique name.

• Filter: Select filtering by either IP or MAC address. Detailed settings can be configured in the Access

Control Rule Settings page.

• Ingress Port Map/Egress Port Map: You can choose which ports to apply the rules to. The Ingress and

Egress condition uses OR logic. This means a packet only needs to match one ingress or egress port rule to

be examined.

If a selected priority index is already in the access control list, then you can modify these parameters listed

above. After configuration, click Activate to confirm the settings. Then you will see a new list appear in the

Access Control List table.