H3c-technologies H3C SecPath F1000-E Manual de usuario Pagina 11
- Pagina / 273
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
1
Configuring ACLs
NOTE:
The IPv6 ACL configuration is available only at the CLI.
Overview
An access control list (ACL) is a set of rules (or permit or deny statements) for identifying traffic based on
criteria such as source IP address, destination IP address, and port number.
You can use ACLs in QoS, firewall, routing, and other technologies for identifying traffic. The packet drop
or forwarding decisions varies with modules that use ACLs. See the specific module for information about
ACL application.
ACL categories
Cate
g
or
y
ACL number IP version
Match criteria
Basic ACLs 2000 to 2999
IPv4 Source IPv4 address
IPv6 Source IPv6 address
Advanced ACLs 3000 to 3999
IPv4
Source IPv4 address, destination IPv4 address,
packet priority, protocols over IPv4, and other
Layer 3 and Layer 4 header fields
IPv6
Source IPv6 address, destination IPv6 address,
packet priority, protocols over IPv6, and other
Layer 3 and Layer 4 header fields
Ethernet frame
header ACLs
4000 to 4999 IPv4 and IPv6
Layer 2 header fields, such as source and
destination MAC addresses, 802.1p priority,
and link layer protocol type
ACL numbering and naming
Each ACL category has a unique range of ACL numbers. When creating an ACL, you must assign it a
number for identification. In addition, you can assign the ACL a name for the ease of identification. After
creating an ACL with a name, you cannot rename it or delete its name.
For an Ethernet frame header ACL, the ACL number and name must be globally unique. For an IPv4 basic
or advanced ACLs, its ACL number and name must be unique among all IPv4 ACLs, and for an IPv6
basic or advanced ACL, among all IPv6 ACLs. You can assign an IPv4 ACL the same number and name
as an IPv6 ACL.
- Preface 3
- Obtaining documentation 4
- Technical support 5
- Documentation feedback 5
- Contents 6
- Configuring ACLs 11
- Match order 12
- ACL rule numbering 13
- IPv4 ACL acceleration 13
- Configuration task list 14
- Creating an ACL 14
- Configuring a basic ACL rule 15
- Configuring ACL acceleration 21
- ACL configuration example 21
- Creating a time range 22
- Defining an ACL 22
- ACL configuration task list 25
- Configuring a basic ACL 26
- Configuring an advanced ACL 27
- Copying an ACL 30
- Configuring security zones 34
- Zone configuration task list 35
- Creating a zone 35
- Configuring a zone member 36
- Zone ID Display the zone ID 37
- Zone configuration example 38
- Configuration consideration 39
- HTTP configuration example 45
- Creating a basic ACL 46
- HTTPS configuration example 49
- Creating a PKI domain 50
- Generating an RSA key pair 51
- Adding a local user 53
- Address resource overview 55
- Exporting configuration 62
- Exporting configurations 68
- Importing configurations 69
- Interzone policy overview 73
- Enable Syslog 93
- Function 93
- Managing sessions 95
- 3. Click Apply 98
- Clearing sessions 108
- Overview 109
- Network requirements 110
- Configuring the host 110
- Configuring the SecPath 110
- Configuration guidelines 112
- Configuring ASPF 113
- ASPF configuration example 114
- Configuration procedure 115
- Verifying the configuration 120
- Authentication client 123
- Access device 123
- Portal server 123
- Security policy server 123
- Portal authentication mode 124
- Configuration prerequisites 127
- Logging off portal users 136
- SecPathHost 138
- RADIUS server 138
- { Name: newpt 147
- { IP address: 192.168.0.111 147
- { Key: portal 147
- { Port number: 50100 147
- Configuration considerations 153
- Troubleshooting portal 158
- Configuring AAA 159
- Client/server model 160
- RADIUS packet format 162
- Extended RADIUS attributes 164
- HWTACACS 165
- Domain-based user management 167
- AAA across VPNs 168
- Protocols and standards 169
- RADIUS attributes 169
- Configuring AAA at the CLI 172
- Configuring AAA schemes 174
- Command 176
- Remarks 176
- Configuring SecPath 189
- Creating a RADIUS scheme 192
- Creating an HWTACACS scheme 204
- Configuring HWTACACS server 205
- Item Descri 207
- Telnet user 209
- HWTACACS server 209
- 10.1.1.1/24 209
- Creating an ISP domain 219
- AAA configuration examples 226
- $enab1$ pass1 1 239
- $enab2$ pass2 2 239
- $enab3$ pass3 3 239
- Troubleshooting AAA 254
- Troubleshooting HWTACACS 256
- Configuring password control 257
- { Digits 0 to 9 259
- Configuring FIPS 268
- FIPS self-tests 269
- Conditional self-tests 270
- Triggering a self-test 270
- Task Command 271
- A C D E F I L O P S T V Z 272
Relacionado con productos y manuales para La Seguridad H3c-technologies H3C SecPath F1000-E
(234 paginas)
(17 paginas)© 2020, manymanuals.es. Todos los derechos reservados | 0.057 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales