H3C Technologies H3C Intelligent Management Center User Manual
Page 856
842
{
If you select Config, IMC matches rules in the order in which they were configured. This feature
works only for devices that support it.
{
If you select Auto, IMC matches rules based on the principle of depth priority.
6.
Enter a brief description for this ACL in the ACL Description field.
A valid length for this field is 0 – 127 characters.
7.
Enter a brief description for this rule set in the Rule Set Description field.
A valid length for this field is 0 – 127 characters.
8.
If you want to apply a time range to the rule set, click the checkbox to the left of Configure ACL
Rules with Time Range.
9.
Click Next.
10.
If you checked the box to Configure ACL Rules with Time Range, click Add under Configure Time
Range to add a time range to this rule set. If you do not want to add a time range, skip to Step 11.
11.
Enter a name for the time range in the Name field of the Add Time Range page.
Time Range names must begin with a letter [A-Z] and consist of 1-32 characters. Blank spaces [ ]
and question marks [?] are not permitted. Uppercase letters may be converted to lowercase letters
by some devices after deployment.
12.
Click Add to enter a time range.
The Add Time Range dialog box appears.
13.
Select the type of time range you want to create by clicking the radio button to the left of the
desired time range type:
{
Fixed if you want to identify a specific and finite start and end date and time.
{
Cyclic if you want the time range to recur for selected days of the week.
14.
Click Add on the Configure Rule page to configure a new rule.
See "
" to configure fixed time ranges and "
" to configure cyclic time ranges.
The Configure Rule – Add Rule page appears.
15.
Select the action you want to take by clicking the radio button to the left of the option you want
to apply to this rule:
{
Select permit if, upon matching the specified conditions, the packet should be forwarded.
{
Select deny if, upon matching the specified conditions, the packet should be discarded.
16.
Select the time range you want to apply to this rule from the Time Range list you created in the Step
10.
17.
Select the source MAC address option you want to use by clicking the radio button to the left of
the desired option in the Source MAC Addr section of the Configure Rule – Add Rule page.
This option specifies where the pattern matching occurs in this rule. In this case, the pattern
matching is applied to the source MAC address.
•
All: Allows you to permit or deny traffic for all MAC addresses.
•
MAC Address/Mask: Allows you to enter a specific MAC address and mask for which you want to
either permit or deny traffic for.
A valid MAC address format for IMC consists of three sets of four hexadecimal characters
separated by a dash, "-". For example,
0014-2ad9-05f7
would be a valid entry for a MAC address in IMC.