2013年11月21日星期四

configuration of the ACL on the MA5600/MA5603

Huawei SmartAX MA5612 is the industry-leading remote multi dwelling unit (MDU) launched by Huawei.

Basic ACL,2000-2999,The rules of a standard ACL are only defined according to the L3 source IP address for analyzing and processing data packets.
Advanced ACL,3000-3999,The rules of an advanced ACL are defined according to the source IP address, destination IP address, type of the protocol over IP, and features of the protocol (including TCP source port, TCP destination port, and ICMP message type).
Compared with the basic ACL, the advanced ACL contains more accurate, comprehensive, and flexible rules.
Link layer ACL,4000-4999,A link-layer ACL allows definition of rules according to the link-layer information such as the source MAC address, VLAN ID, link-layer protocol type, and destination MAC address, and the data is processed accordingly.
User-defined ACL,5000-5999,The rules of a user-defined ACL are defined according to any 32 bytes of the first 80 bytes in the L2 data frame for analyzing and processing data packets.

It is recommended that you define a general rule, such as permit any or deny any, in each ACL, so that each packet has a matching traffic rule that determines to forward or filter the unspecified packet.
The activated ACL rules share the hardware resources with the protocol modules (such as DHCP module and IPoA module). In this case, the hardware resources are limited and may be insufficient. To prevent the failure of enabling other service functions due to insufficient hardware resources, it is recommended you enable the protocol module first and then activate ACL rules in the data configuration. If you fail to enable a protocol module, perform the following steps:
Check whether ACL rules occupy too many resources.
If ACL rules occupy too many resources, deactivate or delete the unimportant or temporarily unused ACL configurations, and then configure and enable the protocol module.


Best price Huawei SmartAX MA5600 MDU at Huanetwork.com, ship Huawei SmartAx MA5600 to worldwide.

没有评论:

发表评论