HP V1905 Series Getting Started Manual page 63

Click Device  ACL  IP Based ACL  Setup. The IP Based ACL Setup Page opens.
Figure 95 IP Based ACL Setup Page
The IP Based ACL Setup Page contains the following fields:
Table 76 IP Based ACL Setup Page item description
Item Description
Selection ACL Selects an existing IP-based ACL to which rules are to be added.
Defines a new user-defined IP-based Access Control List. The options are as follows:

Create ACL

Sets the rule priority, which determines which rule is matched to a packet on a first-match
Priority
basis. The possible field values are 1-65535.
Defines the protocol in the rule to which the packet is matched. The possible fields are:

Protocol

Defines the source port that is used for matched packets. Enabled only when TCP or UDP
Source Port are selected in the Protocol list. The field value is either user defined or Any. If Any is
selected, the IP based ACL is applied to any source port.
Defines the destination port that is used for matched packets. Enabled only when TCP or
Destination Port UDP are selected in the Protocol list. The field value is either user defined or Any. If Any
is selected, the IP based ACL is applied to any destination port.
If checked, enables configuration of TCP flags matched to the packet. The possible fields
are:


TCP Flags



ACL Priority: Sets the ACL priority. The possible field values are 1-100.
Rule Priority Type: Sets the rule priority type. CONFIG: You will have to configure the
ACL rule priority by yourself, AUTO: the ACL rule priority will be configured
automatically.
Select from List: Selects a protocol from a list by which packets are matched to the
rule.
Protocol ID: Selects a protocol ID from a list by which packets are matched to the rule.
Urg: Urgent pointer field significant. The urgent pointer points to the sequence
number of the octet following the urgent data.
Ack: Acknowledgement field significant. The acknowledgement field is the byte
number of the next byte that the sender expects to receive from the receiver.
Psh: Push (send) the data as soon as possible, without buffering. This is used for
interactive traffic.
Rst: Reset the connection. This invalidates the sequence numbers and aborts the
session between the sender and receiver.
Syn: Synchronize Initial Sequence Numbers (ISNs). This is used to initialize a new
58