Page History
...
- In the left navigation panel, click on Access Control Lists and click on the desired table.
- Click on the desired entry.
Enter the desired configuration. See Creating and Modifying Rules for IPv4 and IPv6 Access Control Lists in SBC SWe Edge#General General Information Panel - Field Definitions.
Note title Note Federated IP addresses and FQDNs specified in an Access Control List are whitelisted.
Click OK.
Panel borderStyle none Caption 0 Figure 1 Create Rule Entry
General Information Panel - Field Definitions
...
Panel | ||||
---|---|---|---|---|
| ||||
The Services option allows you to define the service for either UDP or TCP protocol. The Single Port option should be used to specify a specific source or destination port number. This field is available only when either TCP or UDP is selected from the Protocol drop down box. Valid entry: Service or Single. |
Info |
---|
Port range is not supported in SWe Edge. |
Service
Panel | ||||||
---|---|---|---|---|---|---|
| ||||||
|
...
Modifying a Rule
Include Page | ||||||
---|---|---|---|---|---|---|
|
Include Page | ||||||
---|---|---|---|---|---|---|
|
...
Note | |
---|---|
System defaults for IPv4 and IPv6 cannot be deleted. | |
0 | Figure | 1 |
System Default IPv4 ACL List
IPv4 Default List | Protocol | Source IP/Mask | Destination IP/Mask | Protocol Service | Action | Interface Name | Precedence | Primary Key |
---|---|---|---|---|---|---|---|---|
Allow DHCP Access | ||||||||
allow-dhcpv4-dstPort-67 | UDP | Any | Any | DHCP/BOOTP (Server) | Allow | - | 65000 | 1 |
allow-dhcpv4-dstPort-68 | UDP | Any | Any | --None-- | Allow | - | 65001 | 2 |
allow-dhcpv4-srtPort-67 | UDP | Any | Any | --None-- | Allow | - | 65002 | 3 |
allow-dhcpv4-srtPort-68 | UDP | Any | Any | --None-- | Allow | - | 65003 | 4 |
Allow Terminal Services | ||||||||
allow-ssh-=dstPort-22 | TCP | Any | Any | SSH | Allow | - | 65004 | 1 |
allow-ssh-=dstPort-80 | TCP | Any | Any | HTTP | Allow | - | 65005 | 2 |
allow-ssh-=dstPort-443 | TCP | Any | Any | HTTPS | Allow | - | 65006 | 3 |
Allow Everything | ||||||||
allow-all-tcp | TCP | Any | Any | --None-- | Allow | - | 65007 | 1 |
allow-all-udp | UDP | Any | Any | --None-- | Allow | - | 65008 | 2 |
allow-all-icmp | ICMP | Any | Any | --None-- | Allow | - | 65009 | 3 |
...
...
...
System Default IPv6 ACL List
IPv6 Default List | Protocol | Source IP/Mask | Destination IP/Mask | Protocol Service | Action | Interface Name | Precedence | Primary Key |
---|---|---|---|---|---|---|---|---|
Allow DHCP Access | ||||||||
allow-dhcpv4-dstPort-67 | UDP | Any | Any | --None-- | Allow | - | 64000 | 1 |
allow-dhcpv4-dstPort-68 | UDP | Any | Any | --None-- | Allow | - | 64001 | 2 |
allow-dhcpv4-srtPort-67 | UDP | Any | Any | --None-- | Allow | - | 64002 | 3 |
allow-dhcpv4-srtPort-68 | UDP | Any | Any | --None-- | Allow | - | 64003 | 4 |
Allow Terminal Services | ||||||||
allow-ssh-=dstPort-22 | TCP | Any | Any | --None-- | Allow | - | 64004 | 1 |
allow-ssh-=dstPort-80 | TCP | Any | Any | --None-- | Allow | - | 64005 | 2 |
allow-ssh-=dstPort-443 | TCP | Any | Any | --None-- | Allow | - | 64006 | 3 |
Allow Everything | ||||||||
allow-all-tcp | TCP | Any | Any | --None-- | Allow | - | 64007 | 1 |
allow-all-udp | UDP | Any | Any | --None-- | Allow | - | 64008 | 2 |
allow-all-icmp | ICMPv6 | Any | Any | --None-- | Allow | - | 64009 | 3 |
Anchor | ||||
---|---|---|---|---|
|
...
Sample ACL Rule for Microsoft Teams
Description | Protocol | Source IP/Mask | Destination IP/Mask | Protocol Service | Action | Interface Name | Precedence | Primary Key |
---|---|---|---|---|---|---|---|---|
Outbound DNS Request | TCP | <Source IP/Mask> | Any | DNS | Allow | Ethernet 1 | 1 | 1 |
Outbound DNS Reply | TCP | Any | <Destination IP/Mask> | --None-- | Allow | Ethernet 1 | 2 | 2 |
Outbound DNS Request | UDP | <Source IP/Mask> | Any | DNS | Allow | Ethernet 1 | 3 | 3 |
Outbound DNS Reply | UDP | Any | <Destination IP/Mask> | --None-- | Allow | Ethernet 1 | 4 | 4 |
Outbound NTP Request | UDP | <Source IP/Mask> | Any | --None-- | Allow | Ethernet 1 | 5 | 5 |
Outbound NTP Reply | UDP | Any | <Destination IP/Mask> | --None-- | Allow | Ethernet 1 | 6 | 6 |
Outbound SIP Request | TCP | <Source IP/Mask> | Any | --None-- | Allow | Ethernet 1 | 7 | 7 |
Outbound SIP Reply | TCP | Any | <Destination IP/Mask> | --None-- | Allow | Ethernet 1 | 8 | 8 |
Inbound SIP Request | TCP | Any | <Destination IP/Mask> | --None-- | Allow | Ethernet 1 | 9 | 9 |
Inbound SIP Reply | TCP | <Source IP/Mask> | Any | --None-- | Allow | Ethernet 1 | 10 | 10 |
Outbound DHCP Request Port-67 | UDP | Any | Any | DHCP/BOOTP (Server) | Allow | Ethernet 1 | 11 | 11 |
Outbound DHCP Request Port-68 | UDP | Any | Any | --None-- | Allow | Ethernet 1 | 12 | 12 |
Outbound DHCP Reply Port-67 | UPD | Any | Any | --None-- | Allow | Ethernet 1 | 13 | 13 |
Outbound DHCP Reply Port-68 | UPD | Any | Any | --None-- | Allow | Ethernet 1 | 14 | 14 |
Deny All Protocol | Any | Any | Any | --None-- | Deny | Ethernet 1 | 15 | 15 |