H3C Technologies H3C SecPath F1000-E - Manual (Page 7)

ii
Exporting and importing configuration ··············································································································· 52
Configuring service resources ··································································································································· 54
Overview ········································································································································································· 54
Configuring a service resource ····································································································································· 54
Displaying default service resources ··················································································································· 54
Configuring a customized service resource········································································································ 55
Configuring a service group resource ················································································································ 57
Exporting and importing configurations ············································································································· 58
Configuring time range resources ····························································································································· 60
Overview ········································································································································································· 60
Configuring a time range resource in the Web interface ························································································· 60
Configuring a time range at the CLI ···························································································································· 61
Configuration guidelines ··············································································································································· 62
Interzone policy configuration ·································································································································· 63
Interzone policy overview ············································································································································· 63
Configuring an interzone policy ··································································································································· 64
Configuration task list ··········································································································································· 64
Configuring an interzone policy rule ·················································································································· 64
Configuring an interzone policy group ·············································································································· 69
Displaying packet statistics of an interzone policy ···························································································· 70
Querying policies by IP address ·························································································································· 71
Interzone policy configuration examples ············································································································ 71
Firewall policy configuration wizard ··························································································································· 78
Overview ································································································································································ 78
Configuring a firewall policy ······························································································································· 78
Managing sessions ···················································································································································· 85
Overview ········································································································································································· 85
Session management principle ···························································································································· 85
Session management implementation ················································································································· 85
Configuring session management in the Web interface···························································································· 86
Configuration task list ··········································································································································· 86
Configuring basic session management settings ······························································································· 87
Displaying session table information ··················································································································· 90
Displaying global session statistics ······················································································································ 91
Enabling and disabling session statistics collection ··························································································· 93
Displaying session statistics per IP address ········································································································ 94
Displaying session statistics based on security zone ························································································· 95
Configuring session management at the CLI ··············································································································· 96
Setting session aging times based on protocol states ······················································································· 96
Configuring session aging timers based on application layer protocol types ··············································· 97
Enabling checksum verification ···························································································································· 97
Specifying the persistent session rule ·················································································································· 97
Clearing sessions ··················································································································································· 98
Displaying and maintaining session management ···························································································· 98
Configuring virtual fragment reassembly ················································································································· 99
Overview ········································································································································································· 99
Configuring virtual fragment reassembly ····················································································································· 99
Virtual fragment reassembly configuration example ································································································ 100
Configuration guidelines ············································································································································· 102
Configuring ASPF ···················································································································································· 103
Overview ······································································································································································· 103