3Com 3036, Руководство по настройке

Страница: 559 / 762

Configure Firewall 555
Configuring Standard
Access Control List
The value of the standard access control list is an integer from 1 to 99. First of all,
enter the ACL view through
acl
command, and configure the match sequence of
the access control list, and then configure specific access rules through
rule
command. If the matching sequence is not configured, it will be conducted by
auto
mode.
Perform the following configurations in system view and ACL view.
Table 622 Configure Standard Access Control List
normal
means that this rule functions during normal time range, while
special
means that this rule will function during the special time range. Users shall set the
special time segment when using
special
. Multiple rules with the same serial
number will be matched according to “depth-first”command.
By default
normal
is adopted.
Configuring Extended
Access Control List
The value of the extended access control list is an integer from 100 to 199. First of
all, enter the ACL view through
acl
command, and configure the match
sequence of the access control list, and then configure specific access rules
through
rule
command. If the matching sequence is not configured, it will be
conducted in
auto
mode
.
Perform the following configurations in system view and ACL view.
Table 623 Configure Extended Access Control List
Operation Command
Enter the ACL view and configure the
match sequence of access control list
acl acl-number [ match-order config |
auto ]
Configure standard access list rule
rule { normal | special }{ permit |
deny } [source source-addr
source-wildcard | any ]
Delete specific access list rule
undo rule { rule-id | normal |
special }}
Delete access list
undo acl {acl-number| all }
Operation Command
Enter the ACL view and configure the
match sequence of access control list
acl acl-number [ match-order config |
auto ]
Configure extended access control list rule
of TCP/UDP protocol
rule
{
normal | special }{ permit |
deny }
{
tcp | udp } [source
source-addr source-wildcard | any ]
[source-port operator port1 [ port2 ]
] [ destination dest-addr dest-
wildcard | any ] [destination-port
operator port1 [ port2 ] ] [logging]
Configure extended access control list rule
of ICMP protocol
rule
{
normal | special }{ permit |
deny } ICMP [source source-addr
source-wildcard | any ] [ destination
dest-addr dest- wildcard | any ]
[icmp-type icmp-type icmp-code ]
[logging]