Huawei B2268H - Page 89

LTE TDD B2268H
User Guide
10 Firewall
Issue 01 (2014-01-15)
Copyright © Huawei Technologies Co., Ltd.
82
Table 10-5 Security > Firewall > Access Control > Add New ACL Rule/Edit
LABEL
DESCRIPTION
Filter Name
Enter a descriptive name of up to 16 alphanumeric characters, not
including spaces, underscores, and dashes.
You must enter the filter name to add an ACL rule. This field is read-
only if you are editing the ACL rule.
Source Address
Type
Select Single or Range depending on whether you want to enter a
single or a range of source IP address(es) to which the ACL rule
applies. Select Any to indicate any source IP address.
Source IP Address
Start
Enter an IP address or the starting IP address of the source IP range.
Source IP Address
End
Enter the ending IP address of the source IP range.
Destination
Address Type
Select Single or Range depending on whether you want to enter a
single or a range of destination IP address(es) to which the ACL rule
applies. Select Any to indicate any destination IP address.
Destination IP
Address Start
Enter an IP address or the starting IP address of the destination IP
range.
Destination IP
Address End
Enter the ending IP address of the destination IP range.
Select Protocol
Select the name of a configured service or Select Service to define a
new service in this screen.
Protocol
This field is available when you Select Service in Select Protocol.
Choose the protocol type (TCP, UDP, ICMP or Others) of the
service.
Protocol Number
This field is available when you select Others in Protocol.
Enter the protocol number of the service type to which this ACL rule
applies.
Source Port
This field is displayed only when you Select Service in Select
Protocol and TCP or UDP in Protocol.
Select Single or Range and then enter a single port number or the range
of port numbers of the source. Select Any to indicate any source port.
Destination Port
This field is displayed only when you Select Service in Select Protocol
and TCP or UDP in Protocol.
Select Single or Range and then enter a single port number or the range
of port numbers of the destination. Select Any to indicate any
destination port.
Policy
Use the drop-down list box to select whether to silently discard
(DROP), deny and send an ICMP destination-unreachable message to
the sender of (REJECT) or allow the passage of (PERMIT) packets
that match this rule.
Direction
Use the drop-down list box to select the direction of traffic to which this
rule applies. The possible options are LAN to DEVICE, LAN to