No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Web-based Configuration Guide

AR650, AR1600, and AR6100 V300R003

This document describes how to configure and maintain your routers using the web platform.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Blacklist

Blacklist

Context

A blacklist filters packets based on source IP addresses. Compared with the ACL, the blacklist uses simpler matching fields to implement high-speed packet filtering. Packets from certain IP addresses can be effectively filtered out.

After an IP address is added to the blacklist, the firewall denies the packets from this IP address until this entry ages.

Procedure

  • Enabling or disabling the blacklist function
    1. Access the Blacklist tab page.

      Log in to the web platform and choose Security > Firewall > Blacklist, as shown in Figure 14-21.

      Figure 14-21  Configuring blacklist

    2. Set Blacklist to Enabled or Disabled.
    3. Click Apply.

  • Creating a blacklist entry
    1. Access the Blacklist tab page.

      Log in to the web platform and choose Security > Firewall > Blacklist.

    2. Click Create and set parameters in the Create Blacklist dialog box that is displayed, as shown in Figure 14-22. Table 14-8 describes the parameters.

      Figure 14-22  Creating a blacklist

    3. Click OK. A blacklist entry is added to the blacklist.

      Table 14-8  Blacklist parameters

      Parameter

      Description

      IP address

      IP address to be added to the blacklist. The value is a valid IPv4 address.

      Validity period (minute)

      Aging time of a blacklist entry. The value is an integer that ranges from 1 to 1000, in minutes. If no aging time is specified, the IP address is always valid in the blacklist.

  • Modify a blacklist entry
    1. Access the Blacklist tab page.

      Log in to the web platform and choose Security > Firewall > Blacklist.

    2. Click of a blacklist entry.
    3. In the Modify Blacklist dialog box that is displayed, modify parameters listed in Table 14-8.The parameters are the same as those in Figure 14-22. The parameter IP address cannot be modified.
    4. Click OK.
  • Deleting a blacklist entry
    1. Access the Blacklist tab page.

      Log in to the web platform and choose Security > Firewall > Blacklist.

    2. Select a blacklist entry and click Delete. In the Information dialog box that is displayed, click OK.
  • Searching a blacklist entry
    1. Access the Blacklist tab page.

      Log in to the web platform and choose Security > Firewall > Blacklist.

    2. Enter an IP address in the IP address text box and click Search. You can view, modify, or delete the searched blacklist entry.
Download
Updated: 2019-04-12

Document ID: EDOC1100041803

Views: 38769

Downloads: 103

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next