HP 1910 User Manual page 491

Item
Rule ID
Action
Non-First Fragments Only
Logging
Source IP Address
Source Wildcard
IP Address Filter
Destination IP Address
Destination Wildcard
Protocol
ICMP Message
ICMP Type
ICMP Type
ICMP Code
TCP Connection
Established
TCP/UDP Port
Source
Destination
Description
Select the Rule ID box and enter a number for the rule.
If you do not specify the rule number, the system will assign one
automatically.
NOTE:
If the rule number you specify already exists, the following
operations modify the configuration of the rule.
Select the action to be performed for packets matching the rule.
•
Permit—Allows matched packets to pass.
•
Deny—Drops matched packets.
Select this box to apply the rule to only non-first fragments.
If you do no select this box, the rule applies to all fragments and
non-fragments.
Select this box to keep a log of matched packets.
A log entry contains the ACL rule number, operation for the
matched packets, protocol that IP carries, source/destination
address, source/destination port number, and number of
matched packets.
Select the Source IP Address box and enter a source IPv4
address and a source wildcard mask, in dotted decimal
notation.
Select the Source IP Address box and enter a source IP address
and a source wildcard mask, in dotted decimal notation.
Select the protocol to be carried by IP.
If you select 1 ICMP, you can configure the ICMP message type
and code; if you select 6 TCP or 17 UDP, you can configure the
TCP or UDP port.
Specify the ICMP message type and code.
These items are available only when you select 1 ICMP from the
Protocol list.
If you select Other from the ICMP Message list, you need to type
values in the ICMP Type and ICMP Code fields. Otherwise, the
two fields will take the default values, which cannot be changed.
Select this box to make the rule match packets used for
establishing and maintaining TCP connections.
These items are available only when you select 6 TCP from the
Protocol list.
Operator
Select the operators and enter the source port numbers and
destination port numbers as required.
Port
These items are available only when you select 6 TCP or 17 UDP
-
from the Protocol list.
Operator
Different operators have different configuration requirements for
the port number fields:
Port
430