278 Configuring Switching InformationIP ACL ConfigurationAccess control lists (ACL) allow network managers to define classification actions and rules for specificingress ports. Your switch supports up to 100 ACLs. However, the hardware resources are limited and maynot be able to fully support 100 completely populated ACLs.Packets can be filtered on ingress or egress. If the filter rules match, then some actions can be taken,including dropping the packet or disabling the port. For example, a network administrator defines anACL rule that says port number 20 can receive TCP packets. However, if a UDP packet is received thepacket is dropped.ACLs are composed of access control entries (ACE), or rules, that consist of the filters that determinetraffic classifications. The total number of rules that can be defined for each ACL is 127.Use the IP ACL Configuration page to add or remove IP-based ACLs.To display the IP ACL Configuration page, click Switching →Network Security →Access Control Lists→IP Access Control Lists →Configuration in the tree view.Figure 7-6. IP ACL ConfigurationThe IP ACL Configuration page contains the following fields:• IP ACL Name — Specifies user-defined name for the ACL.• Remove — Removes the IP ACL selected in the IP ACL field.Adding an IP-based ACL1. Open the IP ACL Configuration page.2. Click Add.The Add IP ACL page displays.
