Management and Configuration Guide (Includes ACM xl) 2005-12

4-74 ProCurve Secure Access 700wl Series Management and Configuration Guide
Configuring Rights
Built-in and User-defined Address Variables
For use in both Allowed and Redirected Traffic Filters, the 700wl Series system provides a set of
predefined address variables for various system components. These can be viewed (but not changed or
deleted) in the Addresses tab of the pop-up window. User defined variables can be added, edited and
deleted.
The Ports/Addresses pop-up window is accessed by clicking the
View button ( ) next to the Ports or
Addresses field in the New Filters or Edit Filters pages for Allowed or Redirected Traffic filters. If you
click the View button next to an Address field, the pop-up window appears with the Addresses tab
displayed, as shown in Figure 4-36. If you click the View button next to the Ports field, the Ports tab is
displayed when the window appears.
Figure 4-36. The Ports/Addresses pop-up window showing the Addresses tab
Address variables begin and end with an @. The Addresses list includes five predefined address
variables. The @DNS@ address variable appears twice if both a primary and secondary DNS server are
defined on the Network Setup page. The predefined variables are defined in Table 4-30.
Table 4-30. Predefined Address Variables
Address Variable Value/Description
@DNS@ The two entries represent the primary and secondary DNS server addresses.
When you use the @DNS@ variable in an Allowed Traffic filter (or in the filter portion of
a Redirected traffic filter) the filter will match against either DNS address
When you use the @DNS@ variable as the destination of a traffic filter, then whenever
the Redirect filter is applied, the 700wl Series system randomly selects one of the two
addresses as the destination.
@INTERNAL@. The address of the Access Control Server Administrative Interface. By default this is
42.0.0.1, but if you have reconfigured the address range for the internal DHCP server
used for providing NAT addresses, this will be the first address in that range.