H3C Technologies H3C Intelligent Management Center - Manual (Page 824)

810
a. Click the Service tab from the tabular navigation system on the top.
b. Click ACL Management section of the navigation tree on the left.
c. Click the ACL Template link located under ACL Management on the navigation tree on the left.
The Template List displays in the main pane of the page.
2. Click the icon in the Modify field associated with the template you want to modify.
The Modify Template page appears.
You cannot change the Template Name, template Type, or Match Order of an ACL template once
you have created it.
3. Modify the description for this ACL template as needed in the Template Description field.
4. To add a new rule to the existing rule set, click Add Rule to add a rule to the ACL template.
The Add User-Defined Rule page appears.
5. Select the action you want to take by clicking the radio button to the left of the option you want
to apply to this rule:
{
Select permit if, upon matching the specified conditions, the packet should be forwarded.
{
Select deny if, upon matching the specified conditions, the packet should be discarded.
6. Enter a named variable for this ACL template in the Time Range field allowing you to create a
named variable without requiring you enter the Time Range in the template.
The named variable then serves as a placeholder for Time Range you created using the Assistant
combination when you import the template as a rule set into an existing ACL.
7. Enter up to eight hexadecimal patterns, masks, and offsets for matching the contents of a packet
and applying the actions specified in the rule when a hexadecimal pattern is matched.
The following rules and guidelines apply to constructing a valid hexadecimal string, mask, and
offset value:
{
A rule string must be expressed in hexadecimal only
{
A mask must be expressed in hexadecimal only
{
A rule string length must be equal to its mask length
{
Rule string and mask length must be in multiples of 2
{
The minimum length of a rule string and mask is 2
{
The maximum length of a rule string and mask is 160
{
Offsets must be expressed as a decimal integer
{
Offset range varies by the mask length
{
The minimum value for an offset is 0
{
The maximum value for an offset is 79
{
The offset must increase progressively
a. Enter a hexadecimal pattern to be matched in the Rule String field.
b. Enter a mask in the Mask field.
c. Enter the offset in the Excursion field.
d. Enter up to eight Rule String/Mask/Excursion combinations.
8. Click OK to create the rule you have just configured or to accept the modifications.
9. Do one of the following to add more rules, delete, modify or copy existing rules:
{
To add more rules to the ACL template, repeat Steps 4-8.