Huawei S1700 Series Web User Manual page 98

S1700 Managed Series Ethernet Switches
Web User Manual
Table 6-6 Parameters of Extending IP Rules
Item
ACL ID
Rule ID
Action
Protocol Type
Match IP Address
Match Port
Match Priority
TCP Flag
Match ICMP
Fragments
Time Range Name
Step 3 Configure the needed parameter.
Step 4 Click Apply button to apply all the changes made.
----End
Create a Rule for Extending IPv6
Step 1 Click ACL>ACL Profile.
Step 2 Click a created extending IPv6 rule in ACL list, and click New button in the list box of ACL
Rule, opening the configuration page shown as the figure below.
Issue 05 (2012-10-25)
Description
ACL ID that entry rules belongs to.
Enter an ID for rule and the range is 1~65535. If not specified, the
system will distribute automatically.
Specify switch to permit or deny data stream that matches to the rule.
Specify IP protocol type that needs to be matched data.
Source IP address: All Source IP - specify this rule to be applied to all
IP data packages; Specify Source IP/Mask - specify this rule to be
applied to the IP data package of specified IP address/mask. The IP
address will match the whole field if no mask entered.
Destination IP address: All Destination IP – specify this rule to be
applied to all IP data packages; Specify Destination IP/Mask - specify
this rule to be applied to the IP data package of specified IP
address/mask. The IP address will match the whole field if no mask
entered.
Specify the TCP / UDP source port and destination port for data to be
matched.
Specify the IP priority and TOS fields for data to be matched.
Specify the TCP flag field for data to be matched.
Specify the matched data fields, including the ICMP type and ICMP
Message Code.
Use checkbox to specify whether to match packet fragmentation for
this kind of protocol.
Click the Select button to specify the effective period of the rules.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 ACL Configuration
88