HP E3800 Series, Access Security Manual

Page: 106 / 732

3-20
Virus Throttling (Connection-Rate Filtering)
Configuring and Applying Connection-Rate ACLs
< filter | ignore >
The filter option assigns policy filtering to traffic with
source IP address (SA) matching the source address in the
ACE. The
ignore option specifies bypassing policy filtering
for traffic with an SA that matches the source address in
the ACE.
ip < any | host < ip-addr > | ip-addr < mask-length >
Specifies the SA criteria for traffic addressed by the ACE.
any: Applies the ACEs action ( filter or ignore ) to traffic
having any SA .
host < ip-addr >
: Applies the ACEs action (
filter
or
ignore
)
to traffic having the specified host SA .
ip-addr < mask-length >:
Applies the ACEs action (
filter
or
ignore
) to traffic having an SA within the range defined
by either:
< src-ip-addr/cidr-mask-bits>
or
< src-ip-addr < mask >>
Use this criterion for traffic received from either a subnet
or a group of IP addresses. The mask can be in either
dotted-decimal format or CIDR format with the number
of significant bits. Refer to “Using CIDR Notation To
Enter the ACE Mask” on page 3-24.