FortiSwitch ACL processing
Hi,
Coming from Cisco world i would like to know how ACL processing works in fortiswitches. Couldn't find any documentation. Does ACL order matter? For example:
config switch acl ingress
edit 10
set status active
config classifier
set dst-ip-prefix 172.16.10.0/29
set src-ip-prefix 192.168.1.0/24
end
config action
set drop disable
edit 8
set status active
config classifier
set dst-ip-prefix 172.16.10.0/24
set src-ip-prefix 192.168.1.0/24
end
config action
set drop enable
Policy 10 allow traffic to 172.16.10.0/29
Policy 8 deny traffic to 172.16.10.0/24 (supernet)
Will it process based on destination IP with longest subnet mask or pick up the policy with lowest policy identifier number?
