Page History
...
| Add_workflow_for_techpubs | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
| Panel | ||||
|---|---|---|---|---|
In this section:
|
...
General Information Panel - Field Definitions
...
| Parameter |
|---|
...
| Field Definitions |
|---|
| Protocol |
...
| The protocol of the IP packets subject to this rule. Valid options: TCP, UDP, ICMP, OSPF, Any, or Other. Default value: TCP. | |
Action |
...
...
| Specifies the action to be taken upon packets matching this rule. Valid selections: Allow (default, packets matching this rule are accepted) or Deny (packets matching this rule are not accepted). |
| IANA IP Protocol Number |
...
...
| bgColor | #FAFAFA |
|---|---|
| borderStyle | none |
| The Internet Assigned Numbers Authority (IANA) port number for various protocols. This field is available only when Other is selected from the Protocol drop down box. |
Port Selection Method |
...
| bgColor | #FAFAFA |
|---|---|
| borderStyle | none |
| The Services option allows you to define the service for either UDP or TCP protocol. The Single Port option should be used to specify a specific source or destination port number. This field is available only when either TCP or UDP is selected from the Protocol drop-down box. Valid entry: Service or Single. |
Service |
...
...
| ||||||
Precedence |
...
...
| bgColor | #FAFAFA |
|---|---|
| borderStyle | none |
Every rule should have a unique precedence value. Value range is 1 - 65535. Default: 1. |
...
|
...
|
...
| |||
Bucket Size | The policing bucket size (in packets). It represents a credit balance that should be consumed before the packets are discarded. The consumed credits reside in the bucket and gets reduced for every packet received. |
...
Valid entry: 0-255 packets/second. |
Fill Rate |
...
| bgColor | #FAFAFA |
|---|---|
| borderStyle | none |
The number of packets to add to the bucket credit balance (in packets/second). If a packet is received at a rate exceeding this fill rate, it is discarded subjected to the discard rate set in the IP Policing Alarm profile or in the Policing Alarm monitoring this Media Port. The bucket credit balance is always less than the configured bucket size regardless of the size of this increment. Valid entry: 0-25000 packet/second. |
Interface Name |
...
...
A drop-down menu that allows the user to select an interface to which this ACL rule should be applied. |
Source Panel - Field Definitions
| Parameter | Field Definition |
|---|---|
| IP Address |
...
...
| The IPv4 source address of the packets subject to this rule. |
| Netmask |
...
| The subnet mask of the source IP address. | |
| Port Number |
...
...
| The port number associated with the source packets subject to this rule. This field is available only when TCP or UDP is selected from the Protocol drop-down box and Single Port is selected from the Port Selection Method drop-down box. |
Destination Panel - Field Definitions
| Parameter | Field Definition |
|---|---|
| IP Address |
...
...
| bgColor | #FAFAFA |
|---|---|
| borderStyle | none |
| The IPv4 |
...
| source address of the packets subject to this rule. |
| Netmask |
...
| The subnet mask of the |
...
| source IP address. |
| Port Number |
...
...
| The port number associated with the source packets subject to this rule. This field is available only when TCP or UDP is selected from the Protocol drop-down box and Single Port is selected from the Port Selection Method drop-down box. |
Modifying a Rule
| Include Page | ||||||
|---|---|---|---|---|---|---|
|
| Include Page | ||||||
|---|---|---|---|---|---|---|
|
...
System Default IPv4 ACL List
| IPv4 Default List | Protocol | Source IP/Mask | Destination IP/Mask | Protocol Service | Action | Interface Name | Precedence | Primary Key |
|---|---|---|---|---|---|---|---|---|
| Allow DHCP Access | ||||||||
| allow-dhcpv4-dstPort-67 | UDP | Any | Any | DHCP/BOOTP (Server) | Allow | - | 65000 | 1 |
| allow-dhcpv4-dstPort-68 | UDP | Any | Any | --None-- | Allow | - | 65001 | 2 |
| allow-dhcpv4-srtPort-67 | UDP | Any | Any | --None-- | Allow | - | 65002 | 3 |
| allow-dhcpv4-srtPort-68 | UDP | Any | Any | --None-- | Allow | - | 65003 | 4 |
| Allow Terminal Services | ||||||||
| allow-ssh-=dstPort-22 | TCP | Any | Any | SSH | Allow | - | 65004 | 1 |
| allow-ssh-=dstPort-80 | TCP | Any | Any | HTTP | Allow | - | 65005 | 2 |
| allow-ssh-=dstPort-443 | TCP | Any | Any | HTTPS | Allow | - | 65006 | 3 |
| Allow Everything | ||||||||
| allow-all-tcp | TCP | Any | Any | --None-- | Allow | - | 65007 | 1 |
| allow-all-udp | UDP | Any | Any | --None-- | Allow | - | 65008 | 2 |
| allow-all-icmp | ICMP | Any | Any | --None-- | Allow | - | 65009 | 3 |
System Default IPv6 ACL List
| IPv6 Default List | Protocol | Source IP/Mask | Destination IP/Mask | Protocol Service | Action | Interface Name | Precedence | Primary Key |
|---|---|---|---|---|---|---|---|---|
| Allow DHCP Access | ||||||||
| allow-dhcpv4-dstPort-67 | UDP | Any | Any | --None-- | Allow | - | 64000 | 1 |
| allow-dhcpv4-dstPort-68 | UDP | Any | Any | --None-- | Allow | - | 64001 | 2 |
| allow-dhcpv4-srtPort-67 | UDP | Any | Any | --None-- | Allow | - | 64002 | 3 |
| allow-dhcpv4-srtPort-68 | UDP | Any | Any | --None-- | Allow | - | 64003 | 4 |
| Allow Terminal Services | ||||||||
| allow-ssh-=dstPort-22 | TCP | Any | Any | --None-- | Allow | - | 64004 | 1 |
| allow-ssh-=dstPort-80 | TCP | Any | Any | --None-- | Allow | - | 64005 | 2 |
| allow-ssh-=dstPort-443 | TCP | Any | Any | --None-- | Allow | - | 64006 | 3 |
| Allow Everything | ||||||||
| allow-all-tcp | TCP | Any | Any | --None-- | Allow | - | 64007 | 1 |
| allow-all-udp | UDP | Any | Any | --None-- | Allow | - | 64008 | 2 |
| allow-all-icmp | ICMPv6 | Any | Any | --None-- | Allow | - | 64009 | 3 |
| Anchor | ||||
|---|---|---|---|---|
|
...
Sample ACL Rule for Microsoft Teams
| Description | Protocol | Source IP/Mask | Destination IP/Mask | Protocol Service | Action | Interface Name | Precedence | Primary Key |
|---|---|---|---|---|---|---|---|---|
| Outbound DNS Request | TCP | <Source IP/Mask> | Any | DNS | Allow | Ethernet 1 | 1 | 1 |
| Outbound DNS Reply | TCP | Any | <Destination IP/Mask> | --None-- | Allow | Ethernet 1 | 2 | 2 |
| Outbound DNS Request | UDP | <Source IP/Mask> | Any | DNS | Allow | Ethernet 1 | 3 | 3 |
| Outbound DNS Reply | UDP | Any | <Destination IP/Mask> | --None-- | Allow | Ethernet 1 | 4 | 4 |
| Outbound NTP Request | UDP | <Source IP/Mask> | Any | --None-- | Allow | Ethernet 1 | 5 | 5 |
| Outbound NTP Reply | UDP | Any | <Destination IP/Mask> | --None-- | Allow | Ethernet 1 | 6 | 6 |
| Outbound SIP Request | TCP | <Source IP/Mask> | Any | --None-- | Allow | Ethernet 1 | 7 | 7 |
| Outbound SIP Reply | TCP | Any | <Destination IP/Mask> | --None-- | Allow | Ethernet 1 | 8 | 8 |
| Inbound SIP Request | TCP | Any | <Destination IP/Mask> | --None-- | Allow | Ethernet 1 | 9 | 9 |
| Inbound SIP Reply | TCP | <Source IP/Mask> | Any | --None-- | Allow | Ethernet 1 | 10 | 10 |
| Outbound DHCP Request Port-67 | UDP | Any | Any | DHCP/BOOTP (Server) | Allow | Ethernet 1 | 11 | 11 |
| Outbound DHCP Request Port-68 | UDP | Any | Any | --None-- | Allow | Ethernet 1 | 12 | 12 |
| Outbound DHCP Reply Port-67 | UPD | Any | Any | --None-- | Allow | Ethernet 1 | 13 | 13 |
| Outbound DHCP Reply Port-68 | UPD | Any | Any | --None-- | Allow | Ethernet 1 | 14 | 14 |
| Deny All Protocol | Any | Any | Any | --None-- | Deny | Ethernet 1 | 15 | 15 |
Overview
Content Tools