beautypg.com

Configuring acl acceleration, Acl configuration example, Network requirements – H3C Technologies H3C SecPath F1000-E User Manual

Page 21

background image

11

Item Description

Destination MAC Address

Select the Destination MAC Address box and specify the destination MAC

address and wildcard.

Destination Wildcard

LSAP Type

Select the LSAP Type box and specify the DSAP and SSAP fields in the LLC
encapsulation by configuring the following two items:

LSAP Type—Specifies the encapsulation format.

LSAP Wildcard—Specifies the LSAP mask.

LSAP Wildcard

Protocol Type

Select the Protocol Type box and specify the link layer protocol by configuring
the following two items:

Protocol Type—Specifies a protocol type in Ethernet_II and Ethernet_SNAP

frames.

Protocol Wildcard—Specifies a protocol type mask.

Protocol Wildcard

Configuring ACL acceleration

Select Firewall > ACL from the navigation tree to enter the page shown in

Figure 1

. All existing ACLs will

be displayed in the right pane. You can enable or disable ACL acceleration for an ACL through the ACL

Acceleration column:

indicates that the ACL is not accelerated. You can click the Start Accelerating

link to enable ACL acceleration.

indicates that the ACL is accelerated. You can click the Stop Accelerating link

to disable ACL acceleration.

indicates that the ACL has been modified after it was configured with ACL

acceleration. You can click the Start Accelerating link to enable ACL acceleration again, making

changes to the ACL take effect.

ACL configuration example

Network requirements

As shown in

Figure 9

, Host A connects to SecPath through GigabitEthernet 0/1. Configure an ACL to:

Allow Host A to access SecPath using HTTP.

Allow hosts on other segments to access SecPath using HTTP on only working days.