Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule Main Field
 

Image Modified

The Rule window is displayed.

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule
 

Image Modified

To Edit Rule

To edit any of the Rule in the list, click the radio button next to the specific Rule name.

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule Highlighted
 

Image Modified

The Edit Selected Rule window is displayed below.

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule Edit Window
 

Image Modified

Make the required changes and click Save at the right hand bottom of the panel to save the changes made.

...

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule Fields
 

Image Modified

The Create New Rule window is displayed.

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule Create Window
 

Image Modified

The following fields are displayed:

Caption
0Table
1Rule Parameters
 

Parameter

Description

Name

The name of this access control list rule.

Precedence

Use this parameter to specify the rule precedence (e.g. when the rule is loaded and executed over other Rule for each incoming packet). If an incoming packet matches two identical Rule, then IP ACL rule with the highest precedence is applied for that incoming packet.

Each IP ACL rule must use a unique precedence value.

Protocol

Enter IP protocol type for use as a criterion of the IP input match. Choices are 0-255, or one of the following:

  • any – (default) filter all protocols
  • icmp filter ICMP only
  • icmpv6 filter ICMPv6 only
  • ospf filter OSPF only
  • tcp filter TCP only
  • udp filter UDP only 

These protocols are typically associated with particular logical port values.

IP Interface
Group

The name of a IP interface group to match or "any" to match any IP interface group.

IP Interface

The name of an IP interface to match, or "any" to match any IP interface.

Mgmt IP Interface Group

The name of an management Interface Group.

Mgmt IP Interface

The name of an management IP Interface.

Source IP Address

The source IP address to match.

Note

When configuring a Source Ip Address, the Source Address Prefix Length must also be specified.

Source Address
Prefix Length

The length of source IP address prefix which must match the protocol. Must be 0 -
32, default is 0.

Destination IP Address

The destination IP address (IPV4/IPV6) prefix to match.

Note

When configuring a Destination Ip Address, the Destination Address Prefix Length must also be specified.

Destination Address Prefix LengthSpecifies the length of destination IP address prefix. The value ranges from 0 to 128 and the default value is 0.

Source Port

The IP port value. Must be 0 - 65535, default is any.

Destination
Port

The IP port value. Must be 0 - 65535, default is any.

Action

The action to be taken when the IP access control list rule match.

  • Accept
  • Discard

Fill Rate

The number of packets to add to the bucket credit balance (in packets/second). If a packet is received at a rate exceeding this fill rate, it is discarded subjected to the discard rate set in the IP Policing Alarm profile or in the Policer Alarm monitoring this Media Port. The bucket credit balance is always less than the configured bucket size regardless of the size of this increment.

Must be 1 - 10000, default is 50.

Bucket Size

The policing bucket size (in packets). It represents a credit balance that should be consumed before the packets are discarded. The consumed credits reside in the bucket and gets reduced for every packet received on the Network Interface (NI). If a packet is received when the credit balance is less than the size of the packet, the packet is discarded subjected to the discard rate set in the IP Policing Alarm profile or in the Policer Alarm monitoring this Media Port. (default is 'unlimited', which allows continuous policing). Must be 2048-65520, default is 50.

State

It specifies the administrative state of ACL rule.

  • enabled
  • disabled (default)
Vm App NameSpecifies the name of the Virtual Machine application used.
Aggregate PolicerSpecifies the name of aggregate policer with which this rule is associated.

To Copy Rule

To copy any of the created Rule and to make any minor changes, click the radio button next to the specific Rule to highlight the row.

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule Highlighted
 

 Image Modified

Click Copy Rule tab on the Rule List panel.

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule Fields
 

 Image Modified

The Copy Selected Rule window is displayed along with the field details which can be edited.

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule Copy Window
 

Image Modified

Make the required changes to the required fields and click Save to save the changes. The copied Rule is displayed at the bottom of the original Rule in the Rule List panel.

...

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule Highlighted
 

 Image Modified

Click Delete at the end of the highlighted row. A delete confirmation message appears seeking your decision.

Caption
0Figure
1All - Address Context - Ip Access Control List - Rule Delete Confirmation
 

Image Modified

Click OK to remove the specific Rule from the list.

...