User's Manual 136 Document #: LTRT-68822
Mediant 2000
Parameter Description
Protocol
[AccessList_Protocol]
Defines the protocol type (e.g., UDP, TCP, ICMP, ESP or 'Any') or
the IANA protocol number in the range of 0 (Any) to 255.
Note: This field also accepts the abbreviated strings 'SIP' and
'HTTP'. Specifying these strings implies selection of the TCP or UDP
protocols, and the appropriate port numbers as defined on the
device.
Use Specific Interface
[AccessList_Use_Specific
_Interface]
Determines whether you want to apply the rule to a specific network
interface defined in the Multiple Interface table (i.e., packets received
from that defined in the Source IP field and received on this network
interface):
 [0] Disable (default)
 [1] Enable
Notes:
 If enabled, then in the 'Interface Name' field (described below),
select the interface to which the rule is applied.
 If disabled, then the rule applies to all interfaces.
Interface Name
[AccessList_Interface_ID]
Defines the network interface to which you want to apply the rule.
This is applicable if you enabled the 'Use Specific Interface' field.
The list displays interface names as defined in the Multiple Interface
table in 'Configuring IP Network Interfaces' on page 106.
Packet Size
[AccessList_Packet_Size]
Defines the maximum allowed packet size.
The valid range is 0 to 65535.
Note: When filtering fragmented IP packets, this field relates to the
overall (re-assembled) packet size, and not to the size of each
fragment.
Byte Rate
[AccessList_Byte_Rate]
Defines the expected traffic rate (bytes per second), i.e., the allowed
bandwidth for the specified protocol. In addition to this field, the
'Burst Bytes' field provides additional allowance such that
momentary bursts of data may utilize more than the defined byte
rate, without being interrupted.
For example, if 'Byte Rate' is set to 40000 and 'Burst Bytes' to
50000, then this implies the following: the allowed bandwidth is
40000 bytes/sec with extra allowance of 50000 bytes; if, for
example, the actual traffic rate is 45000 bytes/sec, then this
allowance would be consumed within 10 seconds, after which all
traffic exceeding the allocated 40000 bytes/sec is dropped. If the
actual traffic rate then slowed to 30000 bytes/sec, then the
allowance would be replenished within 5 seconds.
Burst Bytes
[AccessList_Byte_Burst]
Defines the tolerance of traffic rate limit (number of bytes).
The default is 0.
Action Upon Match
[AccessList_Allow_Type]
Defines the firewall action to be performed upon rule match.
 "Allow" = (Default) Permits these packets
 "Block" = Rejects these packets
Match Count
[AccessList_MatchCount]
(Read-only) Displays the number of packets accepted or rejected by
the rule.
To Next Page
Loading...
Need help?
General
