IP Access Control Lists (IP ACLs) is a packet filtering object applied to incoming IP packets on the SBC. This object protects the system from a variety of network-borne attacks.

Use IP ACLs to specify rules to permit or deny packets into SBC. The IP ACL can optionally pass the traffic but at only a certain policed rate.

When you create an IP ACL rule, its state defaults to "disabled". Change the state to "enabled" to active the rule.

The maximum number of ACLs that can be configured in SBC is 11,264.

When a user creates a new management group, the user must add user-defined ACL rules to get the equivalent rules set up for the default management group.

The SBC supports initiating SFTP sessions out from the SBC toward a configurable host using a configurable destination TCP port (such as 22).

To allow the ability to run SFTP from the SBC to a remote server, the application SbcSftp has been created. The application creates the necessary ACL, runs the SFTP command, and then deletes the ACL. For more information on SbcSftp, refer to SbcSftp - Secure File Transfers with Automated ACL Creation and Deletion.



Note

Each signaling port within an Address Context must use a unique IP address and port number combination.


Note

The  SBC 7000 system supports creating IP Interface Groups containing sets of IP interfaces that are not "processor friendly" (i.e. carried on physical Ethernet ports served by separate processors). However, restrictions exist regarding the usage of such Interface Groups.

(This ability does not apply to the SBC 5400, which has only two physical media ports. You may configure the IP interfaces from the two physical ports within the same IP Interface Groups without restrictions.)

For complete details, refer to Configuring IP Interface Groups and Interfaces.


Additional topic:


  • No labels