H3C Technologies H3C SecPath F1000-E User Manual
Page 18
8
Figure 6 Advanced ACL rule configuration page
Table 5 Configuration items
Item Description
Rule ID
Select the Rule ID box and enter a number for the rule.
If you do not specify the rule number, the system will assign one automatically.
IMPORTANT:
If the rule already exists, the configuration overwrites the old rule.
Operation
Select the action to be performed for packets matching the rule.
•
Permit—Allows matching packets to pass.
•
Deny—Denies matching packets.
Time Range
Select a time range for the rule.
If you select None, the rule will always be effective.
Available time ranges are configured by selecting Resource > Time Range from
the navigation tree.
Non-first Fragments Only
Select this box to apply the rule to only non-first fragments. If you do no select this
box, the rule applies to all fragments and non-fragments.
Logging
Select this box to log matching IPv4 packets.
A log entry contains the ACL rule number, action on the matching packets,
protocol over the IP, source/destination address, source/destination port
number, and number of matching packets.