Access Control Configuration Example - HP MSR SERIES Configuration Manual

Table 90 Configuration items
Item
Begin-End Time
Week
Protocol
Source IP Address
Destination Port
Operation
Table 91 Commonly used services and their ports
Service
FTP
Telnet
TFTP
Web

Access control configuration example

Network requirements
As shown Figure
Configure an access control policy so that:
Host A to Host C cannot access the Internet from 09:00 to 18:00 every Monday to Friday. They can
•
access the Internet at all other times.
• Host D can access the Internet any time.
Description
Set the time range of a day for the rule to
take effect. The start time must be earlier
than the end time.
Select the days of a week for the rule to
take effect.
Specify to control accesses based on the protocol used for data transmission.
Three options are available: TCP, UDP, and IP.
For which services use which protocols, see
Configure the IP address range of computers. To control a single IP address, enter the
address in the two fields.
Set the port range to be filtered.
For example, to control Telnet access, enter 23 in the two fields.
Action to be taken for matching packets.
The action is Deny, which means all packets matching the access control policies are
not allowed to pass.
Transport layer protocol
TCP
TCP
UDP
TCP
154, internal users of a company, Host A to Host D, access the Internet through the router.
Set both types of time ranges or set neither
of them. To set neither of them, make sure
the Begin-End Time is 00:00 - 00:00 and
no days of a week are selected. Setting
neither of them means it takes effect all the
time.
Table
153
IMPORTANT:
91.
Port number
21
23
69
80