H3C Technologies H3C Intelligent Management Center - Manual (Page 855)

841
{
To copy rules you have already created, click the Copy icon associated with the rule
sequence you want to copy. For more information about copying a rule set, see " Copying a rule
in an ACL rule set ."
{
Rules that belong to a rule set that is configured with a Match Order of Config are executed in
the order in which they appear in the rule set. The order in which rules appear in a rule set is
initially defined by the order in which they are created. You can reorder the rules in a rule set
using the Sort feature. For more information about using Sort to redefine the order of
appearance of rules in a rule set, see "
Using sort to reorder the rules in an ACL rules set ."
{
ACLs can have a profound effect on the performance of networks. ACL Management
automatically evaluates the effectiveness of rules and their effect on overall network
performance as you add rules to a rule set. You can also manually perform an analysis of a rule
set and optimize its effect on network performance using the Optimize feature. For more
information about using this feature, see "
Optimizing the rules in a rule set ."
{
To delete one or more rules from a rule set, see " Deleting rules from an ACL rule set ."
30. Click Finish when you have finished creating rules for this rule set.
Once you have created an ACL you are ready to deploy the ACL to devices using the ACL
Management's ACL Deployment wizard. For more information about deploying ACLs, see
" Deploying ACLs using IMC ACL deployment wizard ."
Adding a link rule set
Link ACLs enable you to define rules based on Layer 2 information including MAC source and
destination addresses, VLAN priority information as well as link layer protocol type.
When you add a rule set to an existing ACL, the ACL type automatically defines the rule set you create.
To add a link rule set to an existing ACL resource:
1. Navigate to ACL Resource:
a. Click the Service tab from the tabular navigation system on the top.
b. Click ACL Management section of the navigation tree on the left.
c. Click the ACL Resource link located under ACL Management on the navigation tree on the left.
The ACL Resource list displays in the main pane of the ACL Resource page.
2. Click the ACL Identifier for the link ACL for which you want to create a new rule set. Refer to the ACL
Type field in the ACL Resource list for identifying ACLs for which the type is Link.
The Rule Set List displays in the main pane of the ACL Resource > <ACL Resource Name (ACL
Identifier)> page.
3. Click Add.
The Basic Info step of the Add Rule Set page appears.
Several fields are already configured and cannot be changed. These include the ACL Identifier,
the ACL Type, and the ACL Resource Name. These cannot be changed because they are inherited
by the ACL to which this rule set belongs.
You can create rule sets of the same type as the type of ACL to which the rule set belongs.
4. Enter a name for the rule set in the Rule Set Name field.
A valid length for a rule set name is 1 – 32 characters.
5. Select the match order you want to apply to this rule set by clicking the radio button to the left
of the Match Order option you want to use.
Options include Config and Auto: