H3C MSR Series Command Reference Manual page 814

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

Table 116 URI field descriptions
Field
protocol
host
port
path
Usage guidelines
You can add multiple rules to a URI ACL. The device matches a packet against the rules in
ascending order of rule ID. The match process stops once a matching rule is found.
Examples
# Add a rule to URI ACL uriacla.
<Sysname> system-view
[Sysname] sslvpn context abc
[Sysname-sslvpn-context-abc] uri-acl uriacla
[Sysname-sslvpn-context-abc-uri-acl-uriacla] rule 1 permit uri
Description
Protocol name. Options are:
http.
https.
tcp.
udp.
icmp.
ip.
Domain name or address of a host.
Valid host address formats:
IPv4 or IPv6 address. For example, 192.168.1.1.
IPv4 or IPv6 address range in the format of start address-end address. For
example, 3.3.3.1-3.3.3.200.
IPv4 address with a mask length or IPv6 address with a prefix length. For example
2.2.2.2/24.
A combination of the preceding host address formats separated by comma (,). For
example, 192.168.1.1,3.3.3.1-3.3.3.200,2.2.2.2/24.
Valid domain name formats:
Fully qualified domain name. For example, www.domain.com
Domain name with the following wildcard characters:
Asterisk (*)—Matches zero or more characters. For example, *.com.
Question mark (?)—Matches one character. For example, www.do?main.com.
Percent sign (%)—Matches one or more characters in a field of the domain
name. For example, www.%.com.
Port number. If no port number is specified, the default port number of the protocol is used.
Valid formats for this field:
Single port number. For example, 1002.
Port number range in the format of start port-end port. For example, 8080-8088.
A combination of the preceding formats separate by comma (,). For example,
1002,90,8080-8088.
String that identifies a directory or file on the host. The path is a sequence of fields
separated by forward or backward slashes.
The following wildcard characters are supported:
Asterisk (*)—Matches zero or more characters. For example, /path1/*.
Question mark (?)—Matches one character. For example, /path?/.
Percent sign (%)—Matches one or more characters in a field of the path. For
example, /path1/%/.
791

Advertisement

Table of Contents
loading

Table of Contents