H3C Technologies H3C Intelligent Management Center - Manual (Page 885)

871
matched. The following rules and guidelines apply to constructing a valid hexadecimal string,
mask, and offset value.
{
A rule string must be expressed in hexadecimal only
{
A mask must be expressed in hexadecimal only
{
A rule string length must be equal to its mask length
{
Rule string and mask length must be in multiples of 2
{
The minimum length of a rule string and mask is 2
{
The maximum length of a rule string and mask is 160
{
Offsets must be expressed as a decimal integer
{
Offset range varies by the mask length
{
The minimum value for an offset is 0
{
The maximum value for an offset is 79
{
The offset must increase progressively
a. Enter a hexadecimal pattern to be matched in the Rule String field.
b. Enter a mask in the Mask field.
c. Enter the offset in the Excursion field.
d. Enter up to eight Rule String/Mask/Excursion combinations.
14. Click OK to create the rule you have just configured.
15. Select one of the following:
{
To add more rules to the ACL, repeat this step.
{
To modify rules you have already created, click the Modify icon associated with the rule
sequence you want to modify. For more information about modifying a rule set, see "
Adding or
modifying a user-defined rule in a user-defined rule set ."
{
To copy rules you have already created, click the Copy icon associated with the rule
sequence you want to copy. For more information about copying a rule set, see " Copying a rule
in an ACL rule set ."
{
Rules that belong to a rule set that is configured with a Match Order of 'Config' are executed in
the order in which they appear in the rule set. The order in which rules appear in a rule set is
initially defined by the order in which they are created. You can reorder the rules in a rule set
using the Sort feature. For more information about using Sort to redefine the order of
appearance of rules in a rule set, see "
Using sort to reorder the rules in an ACL rules set ."
{
Access control lists can have a profound effect on the performance of networks. ACL
Management automatically evaluates the effectiveness of rules and their effect on overall
network performance as you add rules to a rule set. You can also manually perform an analysis
of a rule set and optimize its effect on network performance using the Optimize feature. For
more information about using this feature, see " Optimizing the rules in a rule set ."
{
To delete one or more rules from a rule set, see " Deleting rules from an ACL rule set ."
16. Click Finish to accept your configuration for the import process and to create the new rule set.
Deleting rule sets
To delete one or more rule sets from an ACL:
1. Navigate to ACL Resource:
a. Click the Service tab from the tabular navigation system on the top.