312CHAPTER 7: CONFIGURING AUTHENTICATION, AUTHORIZATION, AND ACCOUNTING PARAMETERS

„Range — Packets are filtered for ports that are between the source port name or number and the end of the range. Go to step 10.

9In the Port Name list, select a TCP or UDP source port name.

To specify the source port by its port number, select Other and go to step 10.

The source port number must be lower than the destination port number.

10In the Port Number list, specify a TCP or UDP source port number.

For a complete list of port numbers, see www.iana.org/assignments/port-numbers.

11If you specified a port range as the operator, you must specify the end value for the range. In the Range End box, specify an ending port number for the range.

12To define a destination port, repeat step 9 and step 10.

13Click Finish.

Creating an ICMP ACE

To create an ICMP ACE:

1In the ACL Setup page of the Create ACL wizard, click New. A list of ACEs appears.

2Select New ICMP ACE. The Create ICMP ACE dialog box appears.

To define the action of the ACE

1In the Action list, select Permit to allow access if the conditions in the ACE are matched, or Deny to refuse access if the conditions are matched.

2If you select Permit, in the CoS box, specify a class-of-service level for packets. For information, see step 4 in “Creating an IP ACE” on page 309.

3To enable counting of packets filtered by an ACL, select Enable Hit Count.

4Define the IP attributes (source and destination IP addresses, the TOS, and the precedence). The steps are the same as the steps when configuring an IP ACE. See step 6 on page 309 through step 9 on page 310.

5In the Type box, specify the ICMP type used to filter ICMP packets.

Page 312
Image 312
HP Manager Software manual Creating an Icmp ACE, To define the action of the ACE