H3C Technologies H3C Intelligent Management Center - Manual (Page 813)

799
If you select Auto, IMC matches rule based on the principle of depth priority.
6. Enter a brief description for this ACL template in the Template Description field.
7. Click Add Rule to add a rule to the ACL template.
The Add Link Rule page appears.
8. Select the action you want to take by clicking the radio button to the left of the option you want
to apply to this rule.
{
Select permit if, upon matching the specified conditions, the packet should be forwarded.
{
Select deny if, upon matching the specified conditions, the packet should be discarded.
9. Enter a named variable for this ACL template in the Time Range field, allowing you to create a
named variable without requiring you enter the Time Range in the template.
The named variable then serves as a placeholder for Time Range you created using the Assistant
combination when you import the template as a rule set into an existing ACL.
10. Select the source MAC address option you want to use by clicking the radio button to the left of
the desired option in the Source MAC Addr field of the Basic Info section.
This option specifies where the pattern matching occurs in this template rule. In this case, the
pattern matching is applied to the source MAC address.
• All: Allows you to permit or deny traffic for all MAC addresses.
• MAC Address/Mask: Allows you to enter a specific MAC address and mask for which you want to
either permit or deny traffic.
A Valid MAC address format for IMC consists of three sets of four hexadecimal characters
separated by a dash, "-". For example:
0014-2ad9-05f7
would be a valid entry for a MAC address in IMC.
Similarly, the format for a MAC address mask consists of three sets of four hexadecimal
characters separated by a dash, "-". For example:
ffff-ffff-ffff
would be a valid entry for a MAC address mask in IMC.
The MAC address and its mask must be separated by a forward slash, "/".
A valid entry for a MAC Address/Mask would be:
0014-2ad9-057f/ffff-fff-ffff
• Variable Address: Enter a name for this variable in the field to the right, allowing you to create a
named variable without requiring you to enter the MAC addresses/masks in the template. The
named variable then serves as a placeholder for entering a MAC address/mask combination when
you import the template as a rule set into an existing ACL.
11. Select the destination MAC address option you want to use by clicking the radio button to the
left of the desired option in the Destination MAC Address field of the Basic Info section.
This option specifies where the pattern matching occurs in this template rule. In this case, the
pattern matching is applied to the source MAC address.
• All: Allows you to permit or deny traffic for all MAC addresses.
• MAC Address/Mask: Allows you to identify a specific MAC address and mask for which you want
to either permit or deny traffic.
A valid MAC address format for IMC consists of three sets of four hexadecimal characters
separated by a dash, "-". For example,
0014-2ad9-05f7