Applying An Acl To An Interzone Instance For Packet Filtering; Setting The Interval For Generating And Outputting Packet Filtering Logs; Setting The Packet Filtering Default Action - HP MSR4080 Configuration Manual

Step
3. Apply an ACL to the interface
to filter packets.

Applying an ACL to an interzone instance for packet filtering

Step
1. Enter system view.
2. Enter interzone view.
3. Apply an ACL to the interzone
instance to filter packets.
Setting the interval for generating and outputting packet
filtering logs
After you set the interval, the device periodically generates and outputs the packet filtering logs to the
information center, including the number of matching packets and the matched ACL rules. For more
information about information center, see Network Management and Monitoring Configuration Guide.
To set the interval for generating and outputting packet filtering logs:
Step
1. Enter system view.
2. Set the interval for generating
and outputting packet filtering
logs.

Setting the packet filtering default action

Step
1. Enter system view.
2. Set the packet filtering default
action to deny.
Command
packet-filter [ ipv6 ] { acl-number |
name acl-name } { inbound |
outbound }
Command
system-view
interzone source
source-zone-name destination
destination-zone-name
packet-filter [ ipv6 ] { acl-number |
name acl-name }
Command
system-view
acl [ ipv6 ] logging interval interval
Command
system-view
packet-filter default deny
13
Remarks
By default, an interface does not
filter packets.
You can apply up to 32 ACLs to the
same direction of an interface.
Remarks
N/A
N/A
By default, an interzone does not
filter packets.
You can apply up to 32 ACLs to the
same interzone instance.
Remarks
N/A
The default setting is 0 minutes,
which mean that no packet filtering
logs are generated.
Remarks
N/A
By default, the packet filter permits
packets that do not match any ACL
rule to pass.