R3204P16-HP Load Balancing Module Security Configuration Guide-6PW101

49
Task Remarks
Configuring a basic ACL rule Required
Complete one of the three tasks according to the ACL category.
IMPORTANT:
• Within an ACL, the permit or deny statement of each rule must be
unique. If the ACL rule you are creating or editing has the same deny
or permit statement as another rule in the ACL, your creation or
editing attempt will fail.
• You can edit ACL rules only when the match order is config.
Configuring an advance ACL rule
Configuring an Ethernet frame
header ACL rule
Configuring ACL acceleration
Optional
Necessary only when the ACL contains a large number of ACL rules.
IMPORTANT:
• Only IPv4 basic ACLs and IPv4 advanced ACLs support ACL
acceleration.
• ACL acceleration is not available for ACLs that contain a
non-contiguous wildcard mask, for example, 0.255.0.255.
• After you modify an IPv4 ACL with ACL acceleration enabled,
disable and re-enable ACL acceleration to ensure correct rule
matching.
Configuring a time range
A time range defines a time range, which can be referenced by an ACL to control when a rule is effective.
Select Security > Time Range from the navigation tree to enter a time range list page, as shown in Figure
52. C
lick Add to enter the time range configuration page, as shown in Figure 53.
Figure 52 Time range list
If the time range includes the current time, the time range is displayed as "Active" in the time range list.
Otherwise, the time range is displayed as "Inactive".