Fortinet FortiGate 3000, Руководство администратора

Страница: 163 / 398

Router Router objects
FortiGate-3000 Administration Guide 01-28006-0010-20041105
163
To add an access list name
1 Go to Router > Router Objects > Access List .
2 Select Create New.
3 Enter a name for the access list.
4 Select OK.
New access list entry
Figure 68: Access list entry configuration
To configure an access list entry
1 Go to Router > Router Objects > Access List .
2 Select the Add access-list entry icon to add a new access list entry or select the edit
icon beside an existing access list entry to edit that entry.
3 Select Permit or Deny for the Action to take for the prefix in this access list entry.
4 Select either Match any or Match a network address.
5 If you selected Match a network address, enter the IP address and netmask that
define the prefix for this access list entry.
6 Select Exact match if required.
7 Select OK.
Prefix list
A prefix list is an enhanced version of an access list that allows you to control the
length of the prefix netmask.
Each rule in a prefix list consists of a prefix (IP address and netmask), the action to
take for this prefix (permit or deny), and maximum and minimum prefix length settings.
list Entry The access list name and the number of this entry.
Action Set the action to take for this prefix to Permit or Deny.
Prefix Select Match any to match any prefix. Select Match a network address
and enter the prefix (IP address and netmask) for this access list rule.
Exact match By default, access list rules are matched on the prefix or any more
specific prefix. Enable Exact match to match only the configured prefix.