H3C Technologies H3C Intelligent Management Center - Manual (Page 806)

792
Basic info
• Template Name: Contains the name for the ACL template.
• Type: Contains the ACL template type for the associated template. There are four types of templates
in IMC: Basic, Advanced, Link, or User-Defined.
• Match Order: Contains the match order type for the associated rule. The Match Order can either be
Config or Auto.
• Template Description: Contains a description for the associated template.
Rule maintenance field names and explanations:
• No.: Contains the sequence or rule number for the associated rule in the Rule Set. The value in the
sequence field serves as a link for navigating to the View Rule page for the associated rule. This
page displays rule configuration information for the associated rule. For more information about
viewing rule information, see " Viewing ACL templates ."
• Action: Contains the access control action specified in the associated rule. Actions include permit
and deny.
• Time Range: Contains the name assigned to the Time Range specified for the associated rule.
• Source Address: Contains the source address specified in the associated rule for which the action
is taken. For example, if the action is to permit IP traffic, this field identifies the source IP address
from which IP traffic is permitted. Source Address is available for basic and advanced ACL
templates.
• Protocol: Contains the protocol specified in the associated rule for which the action is taken.
Protocol is available for advanced ACL templates.
• Destination Address: Contains the destination address specified in the associated rule for which the
action is taken. For example, if the action is to permit IP traffic, this field identifies the destination IP
address to which IP traffic is permitted. Destination Address is available for advanced ACL
templates.
• Source Mac Addr: Contains the source MAC address specified in the associated rule for which the
action is taken. For example, if the action is to permit traffic, this field identifies the source MAC
address from which traffic is permitted. Source Mac Addr is available for link ACL templates.
• Destination Mac Addr: Contains the destination MAC address specified in the associated rule for
which the action is taken. For example, if the action is to permit traffic, this field identifies the
destination MAC address from which traffic is permitted. Destination Mac Addr is available for link
ACL templates.
• Matching String: Contains the hexadecimal string to be matched in a packet, the mask, and the
offset values for a user-defined pattern-matching rule. Matching String is available for user-defined
ACL templates.
Creating ACL templates
ACL templates enable you to create containers for the configuration options of an ACL. ACLs contain
rules sets and other ACL attributes that define whether or not packets are forwarded or dropped by
network devices. Once a template is created, you can import templates into existing ACLs for simplifying
the process of ACL creation and management. Once an ACL has been created in ACL Management, it
can then be deployed to one or more devices using the ACL Deployment wizard. For more information,
see " Managing ACL templates in IMC ."