HP FlexNetwork NJ5000 User Manual page 402

Configure a rule for an advanced IPv4 ACL as described in
3.
Click Add.
4.
Table 136 Configuration items
Item
ACL
Rule ID
Action
Non-First Fragments Only
Logging
Source IP Address
Source Wildcard
IP Address
Filter
Destination IP Address
Destination Wildcard
Protocol
ICMP Message
ICMP Type
ICMP Type
ICMP Code
Description
Select the advanced IPv4 ACL for which you want to configure
rules.
Available ACLs are advanced IPv4 ACLs.
Select the Rule ID box and enter a number for the rule.
If you do not specify the rule number, the system will assign
one automatically.
If the rule number you specify already exists, the following
operations modify the configuration of the rule.
Select the action to be performed for packets matching the
rule:
•
Permit—Allows matched packets to pass.
•
Deny—Drops matched packets.
Select this box to apply the rule to only non-first fragments.
If you do no select this box, the rule applies to all fragments
and non-fragments.
Select this box to keep a log of matched packets.
A log entry contains the ACL rule number, operation for the
matched packets, protocol number, source/destination
address, source/destination port number, and number of
matched packets.
This function is not supported.
Select the Source IP Address box and enter a source IPv4
address and a source wildcard mask, in dotted decimal
notation.
Select the Source IP Address box and enter a source IP
address and a source wildcard mask, in dotted decimal
notation.
Select the protocol number.
If you select 1 ICMP, you can configure the ICMP message
type and code. If you select 6 TCP or 17 UDP, you can
configure the TCP or UDP port.
Specify the ICMP message type and code.
These items are available only when you select 1 ICMP from
the Protocol list.
If you select Other from the ICMP Message list, you need to
type values in the ICMP Type and ICMP Code fields.
Otherwise, the two fields will take the default values, which
cannot be changed.
390
Table 136.