Understanding Security Group Rules

This page describes the summary of all the ports used in the Sonus cloud products.

In the cloud environment, these ports are allowed in the security group associated with the instance type. The various fields are:

• Direction (initial) - for UDP, this will be BOTH. For TCP, this will be OUTBOUND for clients and INBOUND for servers (to match the direction of the initial connection). 

  This definition matches the way firewall rules typically have to be defined.

• Ether Type - It is either IPv4 or IPv6. Separate rules are supplied when both IPv4 and IPv6 are supported.
• IP Protocol - UDP or TCP.
• Local Port - an exact port number, or a wildcard. Note that TCP clients usually use an ephemeral local port which must be wildcarded.
• Local IP/interface - the local interface or internal object (such as SIP SP)
• Remote Port - an exact port number, or a wildcard. Note that TCP clients usually use an ephemeral local port (which must be wildcarded).
• Remote Peers - peer type. Use this to set the most constrained remote network prefix. 

SBC Configurator Security Rules

The following tables provide security rules for SBC Configurator - Only the management interface is used.

S-SBC and M-SBC Security Rules

The following tables provide security rules for S-SBC and M-SBC: