Parameter Description
Web/EMS: Internal
Firewall Parameters
CLI: configure voip >
access-list
[AccessList]
This table parameter defines the device's access list (firewall), which
defines network traffic filtering rules.
The format of this parameter is as follows:
[AccessList]
FORMAT AccessList_Index = AccessList_Source_IP,
AccessList_Source_Port, AccessList_PrefixLen, AccessList_Source_Port,
AccessList_Start_Port, AccessList_End_Port, AccessList_Protocol,
AccessList_Use_Specific_Interface, AccessList_Interface_ID,
AccessList_Packet_Size, AccessList_Byte_Rate, AccessList_Byte_Burst,
AccessList_Allow_Type;
[\AccessList]
For example:
AccessList 10 = mgmt.customer.com, , , 32, 0, 80, tcp, 1, OAMP, 0, 0, 0,
allow;
AccessList 22 = 10.4.0.0, , , 16, 4000, 9000, any, 0, , 0, 0, 0, block;
In the example above, Rule #10 allows traffic from the host
‘mgmt.customer.com’ destined to TCP ports 0 to 80 on interface OAMP
(OAMP). Rule #22 blocks traffic from the subnet 10.4.xxx.yyy destined to
ports 4000 to 9000.
Note: For a description of this table, see 'Configuring Firewall Settings' on
page 137.
66.4.2 HTTPS Parameters
The Secure Hypertext Transport Protocol (HTTPS) parameters are described in the table
below.
HTTPS Parameters
Parameter Description
Web: Secured Web
Connection (HTTPS)
EMS: HTTPS Only
CLI: secured-connection
[HTTPSOnly]
Determines the protocol used to access the Web interface.
[0] HTTP and HTTPS (default).
[1] HTTPs Only = Unencrypted HTTP packets are blocked.
Note: For this parameter to take effect, a device reset is required.
EMS: HTTPS Port
CLI: https-port
[HTTPSPort]
Defines the local Secured HTTPS port of the device. This parameter
allows secure remote device Web management from the LAN. To enable
secure Web management from the LAN, configure the desired port.
The valid range is 1 to 65535 (other restrictions may apply within this
range). The default port is 443.
Note: For this parameter to take effect, a device reset is required.
Web/EMS: HTTPS
Cipher String
CLI: https-cipher-string
[HTTPSCipherString]
Defines the Cipher string for HTTPS (in OpenSSL cipher list format). For
the valid range values, refer to URL
http://www.openssl.org/docs/apps/ciphers.html.
The default is ‘RC4:EXP’ (Export encryption algorithms). For example,
use ‘ALL’ for all ciphers suites (e.g., for ARIA encryption for TLS). The
only ciphers available are RC4 and DES, and the cipher bit strength is
limited to 56 bits.
Notes:
For this parameter to take effect, a device reset is required.
To Next Page
Loading...
