Configuring Advanced Acl Settings - 3Com WX1200 Reference Manual

228 C 6: C
HAPTER ONFIGURING
Configuring
Advanced ACL
Settings
WX S P
YSTEM ARAMETERS
After you configure an ACL, you can configure the following advanced
settings:
Hit counter (enable or disable)
Hit sample rate (applies if the hit counter is enabled)
Established option, to apply a new TCP ACE only to established
(existing) TCP sessions. By default, TCP ACEs apply to new sessions as
well as existing ones.
ICMP properties, to specify the type and code values for ICMP ports
(applies only to ACEs that have ICMP as the protocol)
Capture option, to redirect matching packets to the CPU (applies to
ACEs used for Web Portal access)
To change the hit sample rate
The hit sample rate specifies the time interval, in seconds, at which the
packet counter is sampled for each security ACE on which the hit counter
is enabled.
By default, the hit sample rate is 0, even when the hit counter is enabled.
To use the hit counter, you must enable it and set the hit sample rate. The
hit sample rate applies globally to all ACEs on which the hit counter is
enabled.
1 In the Task List panel, select Edit ACL hit sample rate.
2 Select or type the number of seconds between updates in the Hit Sample
Rate box.
3 Click OK.
To enable the hit counter for an ACE
You can enable the hit counter on an individual ACE basis.
1 Select the ACE in the ACL table.
2 In the Task List panel, select Enable Hits for this rule.
You also must set the hit sample rate to a value greater than 0, which is
the default. (See "To change the hit sample rate".)