3Com 3CRWX120695A, Справочное руководство

Страница: 354 / 570

354 C
HAPTER
7: C
ONFIGURING
A
UTHENTICATION
, A
UTHORIZATION
,
AND
A
CCOUNTING
P
ARAMETERS
3 In the Action list, select Permit to allow access if the conditions in the
ACE are matched, or Deny to refuse access if the conditions are
matched.
4 If you select Permit , in the CoS box, specify a class-of-service level for
packets. For information, see step 4 in “Creating an IP ACE” on
page 350.
5 To enable counting of packets filtered by an ACL, select Enable Hit
Count .
6 To apply the ACL only to established TCP sessions, select
Established Connection .
If you select this option, the ACL is applied only to established TCP
sessions and is not applied to new TCP sessions.
7 Define the IP attributes (source and destination IP addresses, the TOS, and
the precedence). The steps are the same as the steps when configuring
an IP ACE. See step 6 on page 351 through step 9 on page 352.
8 In the Operator list of the Create TCP ACE or Create UDP ACE dialog box,
select one of the following:
■
None — No source port is used to filter packets. Go to step 13.
■
Less Than — Packets are filtered for all ports whose port numbers are
lower than the source port.
■
Greater Than — Packets are filtered for all ports whose port numbers
are higher than the source port.
■
Equal — Packets are filtered for the source port name or number.
■
Not Equal — Packets are filtered for all ports except the source port
name or number.
■
Range — Packets are filtered for ports that are between the source
port name or number and the end of the range. Go to step 10.
9 In the Port Name list, select a TCP or UDP source port name.
To specify the source port by its port number, select Other and go to
step 10.
The source port number must be lower than the destination port number.
10 In the Port Number list, specify a TCP or UDP source port number.