H3C Technologies H3C Intelligent Management Center User Manual

Page 836

Advertising
background image

822

a.

Select the source TCP or UDP port option by clicking the radio button to the left of the port

option you want to apply in the Source Port field of the Advanced Settings section.

{

Undefined: Allows you to permit or deny traffic for all TCP or UDP port numbers.

{

Specified Port: Allows you to identify a specific TCP or UDP port number or range of numbers.

b.

Click the radio button to the left of Specified Port and select the operator you want to use
from the list located to the right of the Specified Port option.

c.

Enter the TCP or UDP port number in the Port field.

{

Variable Port: Allows you to create a named variable without requiring you to enter the ports in
the template. The named variable then serves as a placeholder for Service you creating using

the Assistant combination when you import the template as a rule set into an existing ACL.

d.

Enter a name for this variable in the field to the right.

10.

If you selected TCP or UDP as the protocol you want to apply this ACL rule to in Step 4, you must
also specify the destination TCP or UDP port numbers:

a.

Select the destination TCP or UDP port option by clicking the radio button to the left of the
port option you want to apply in the Destination Port field of the Advanced Settings section:

{

Undefined: Allows you to permit or deny traffic for all TCP or UDP port numbers.

{

Specified Port: Allows you to identify a specific TCP or UDP port number or range of numbers.

b.

Click the radio button to the left of Specified Port and select the operator you want to use
from the list located to the right of the Specified Port option.

c.

Enter the TCP or UDP port number in the Port field.

{

Variable Port: Allows you to create a named variable without requiring you to enter the ports in
the template. The named variable then serves as a placeholder for Service you creating using

the Assistant combination when you import the template as a rule set into an existing ACL.

d.

Enter a name for this variable in the field to the right.

11.

If you selected TCP or UDP as the protocol you want to apply this ACL rule to in Step 4, you could
be promoted to select these options:

{

Click the radio button to the left of Yes in the HP ACK option if you want to apply the rule to
match the TCP ACK, otherwise click on the radio button to the left of No.

{

Click the radio button to the left of Yes in the HP FIN option if you want to apply the rule to
match the TCP FIN, otherwise click on the radio button to the left of No.

{

Click the radio button to the left of Yes in the HP RST option if you want to apply the rule to
match the TCP RST, otherwise click on the radio button to the left of No.

{

Click the radio button to the left of Yes in the HP SYN option if you want to apply the rule to
match the TCP SYN, otherwise click on the radio button to the left of No.

The HP ACK, HP FIN, HP RST, and HP SYN settings are valid only for the HP E series devices.

12.

Select the IP priority you want to apply to ACL template from the IP Priority list.

13.

Select the Type of Service for this ACL template from the TOS Value list.

14.

Select the DSCP value you want to apply to this ACL template from the DSCP Value list.

15.

Do one of the following:

{

Click the radio button to the left of Yes in the Fragment option if you want to apply the rule

to each fragment.

{

Click the radio button to the left of No in the Fragment option if you want to apply the rule to
first fragments.

Advertising