Fortinet FortiGate FortiGate-5020, Руководство администратора

Страница: 165 / 402

Router Router objects
FortiGate-5000 series Administration Guide 01-28008-0013-20050204
165
New access list
Figure 73: Access list name configuration
To add an access list name
1 Go to Router > Router Objects > Access List .
2 Select Create New.
3 Enter a name for the access list.
4 Select OK.
New access list entry
Figure 74: Access list entry configuration
To configure an access list entry
1 Go to Router > Router Objects > Access List .
2 Select the Add access-list entry icon to add a new access list entry or select the edit
icon beside an existing access list entry to edit that entry.
3 Select Permit or Deny for the Action to take for the prefix in this access list entry.
4 Select either Match any or Match a network address.
5 If you selected Match a network address, enter the IP address and netmask that
define the prefix for this access list entry.
6 Select Exact match if required.
7 Select OK.
list Entry The access list name and the number of this entry.
Action Set the action to take for this prefix to Permit or Deny.
Prefix Select Match any to match any prefix. Select Match a network address
and enter the prefix (IP address and netmask) for this access list rule.
Exact match By default, access list rules are matched on the prefix or any more
specific prefix. Enable Exact match to match only the configured prefix.