Cisco VPN 3000, Руководство пользователя

Страница: 286 / 502

13
Policy Management
13-36 VPN 3000 Concentrator Series User Guide
Move Up / Move Down
To change the order in which a rule is applied within the filter, select the rule from the Current Rules in
Filter list and click Move Up or Move Down . The Manager reorders the current rules, modifies the active
configuration, refreshes the screen, and shows the reordered list. If you try to move a rule out of its
direction group (inbound or outbound), the Manager displays an error message.
Assign SA to Rule
To modify the Security Association applied to a current rule that has an Apply IPSec action configured,
select the rule from the Current Rules in Filter list and click Assign SA to Rule . The Manager displays the
Configuration | Policy Management | Traffic Management | Assign Rules to Filter | Change SA on Rule screen.
Done
When you are finished configuring the rules in this filter, click Done . The Manager returns to the
Configuration | Policy Management | Traffic Management | Filters screen and refreshes the Filter List .
Reminder: The Manager immediately includes your changes in the active configuration. To save the active
configuration and make it the boot configuration, click the
Save Needed
icon at the top of the Manager
window.
Configuration | Policy Management | Traffic Management |
Assign Rules to Filter | Add SA to Rule
This screen lets you add a configured Security Association to a rule that has an Apply IPSec action
configured. You can assign only one SA to a rule.
You configure Security Associations on the
Configuration | Policy Management | Traffic Management |
Security Associations
screens.
Figure 13-16: Configuration | Policy Management | Traffic Management | Assign Rules to Filter |
Add SA to Rule screen