H3C Technologies H3C Intelligent Management Center User Manual
Page 55
46
−
NAT Mapping—Indicates one-on-one NAT mapping. Only the source IP address,
transferred IP address, and time fields are valid in the flow records.
−
Long-lasting—Indicates the intermediate forwarding records last a long time.
−
Removed Due to Substitution—Indicates the flow is removed due to substitution operation.
−
Creation Records—Indicates the records of creating a flow.
−
Undefined Flows—Indicates a flow that is not defined in the system.
−
Others—Other reasons that cause flow termination.
6.
In the Audit Condition area, perform the following tasks:
a.
Select Meet All or Meet Any.
If you select Meet All, UBA audits only flow records that meet all of the audit conditions you
will select. If you select Meet Any, UBA audits flow records that meet any of the audit
conditions you will select.
b.
Select the Access User option, enter the access user name in the Access User field, and select
the terminal type from the Terminal Type list and the operating system from the Operating
System list.
The Access User, Terminal Type, and Operating System fields are displayed only when UBA
works with UAM. For more information about UBA working with UAM, see "
."
The default settings for the Terminal Type and Operating System fields are Unlimited. When
you select the Access User option, you cannot select the Source and Destination options.
c.
Select the Source and Destination options, and enter the source and destination addresses.
You can enter an IP address, an IP segment, or an IP address range.
An example of a valid IP address entry:
10.153.89.0
An example of a valid IPv4 segment:
10.153.89.*
An example of a valid IPv4 address range entry:
1.1.1.1-2.2.2.2
An example of a valid IPv6 address entry:
a001:410:0:1::1
An example of a valid IPv6 address and subnet mask entry using CIDR notation:
a001:410:0:1::1/64
An example of a valid IPv6 address entry:
a001:410:0:1::1- a001:410:0:1::100
d.
Select the Source Port and Destination Port options and enter the source and destination port
numbers in the format of 21 or 21-100.
e.
Select the Protocol option and select a protocol type from the Protocol list. Options are
Unlimited, TCP, UDP, ICMP, and IPv6-ICMP.
f.
Select the Application option and select one or more applications. If you select the Application
option, you cannot select the Source Port, Destination Port, and Protocol options.
To select applications:
−
Click Select next to the Application field.