H3C Technologies H3C Intelligent Management Center - Manual (Page 157)

139
Configuring access ACLs
Operators can define access ACLs and apply them to access policies to restrict the devices that users can
access. The access ACLs in UAM can be deployed only to HP ProCurve switches.
Accessing the access ACL list page
1. Click the User tab.
2. Select User Access Policy > Access Policy from the navigation tree.
3. Hover over the icon to the right of the menu and click Access ACL to display the list.
Access ACL list contents
{
ACL Name—Unique name of the access ACL. Click the name to display the ACL name details
page.
{
Service Group—Name of the service group to which the access ACL belongs.
{
Description—Description of the access ACL.
{
Modify—Click the Modify icon to modify settings of the access ACL.
{
Delete—Click the Delete icon to delete the access ACL.
Viewing the access ACL details
To view detailed information about an access ACL:
1. Access the access ACL list page.
2. Click the name of the access ACL for which you want to view its details.
The Access ACL Details page includes the Basic Information and ACL Rules areas.
Basic Information area parameters:
{
ACL Name—Unique name of the access ACL.
{
Default Action—Action to take on packets that do not match any ACL rule on the ACL Rule List
area: Permit or Deny. The Permit action means to forward the packets. The Deny action means
to drop the packets.
{
Count packets that do not match the ACL—Whether to count the packets that do not match any
ACL rule on the ACL Rule List area.
{
Description—Description of the access ACL.
{
Service Group—Name of the service group to which the access ACL belongs.
ACL Rules area parameters:
{
Action—Action to take on packets that match the ACL rule: Permit or deny. The Permit action
means to forward the packets. The Deny action means to drop the packets.
{
Protocol—Name or number of the transport layer protocol. This field displays All IP Protocols if
all transport layer protocol packets can match the ACL rule.
{
Dest IP—Destination IP address.
{
Dotted Decimal Mask—Subnet mask of the destination IP address, in dotted decimal notation.
{
Dest Port—Destination port number. This parameter appears only when the transport layer
protocol is TCP or UDP.