H3C Technologies H3C SecPath F1000-E - Manual (Page 115)

105
Configuration procedure
1. Configure zone 1 and zone 2, and specify security zones for the interfaces. (Details not shown.)
2. Configure an ASPF policy:
a. Select Firewall > Session Table > Advanced from the navigation tree.
b. Click the ASPF tab.
c. Click Add.
d. Select zone 1 from the Source Zone list, select zone 2 from the Dest Zone list, and click the
Discard ICMP error packets box.
e. Click Apply.
Figure 105 Configuring ASPF policy