User's Manual 142 Document #: LTRT-42060
Mediant 2600 E-SBC
Parameter Description
Interface Name
CLI: network-interface-name
[AccessList_Interface_x]
Defines the network interface to which you want to apply the
rule. This is applicable if you enabled the 'Use Specific
Interface' field. The list displays interface names as defined
in the Interface table in ''Configuring IP Network Interfaces''
on page
112.
Packet Size
CLI: packet-size
[AccessList_Packet_Size]
Defines the maximum allowed packet size.
The valid range is 0 to 65535.
Note: When filtering fragmented IP packets, this field
relates to the overall (re-assembled) packet size, and not to
the size of each fragment.
Byte Rate
CLI: byte-rate
[AccessList_Byte_Rate]
Defines the expected traffic rate (bytes per second), i.e., the
allowed bandwidth for the specified protocol. In addition to
this field, the 'Burst Bytes' field provides additional
allowance such that momentary bursts of data may utilize
more than the defined byte rate, without being interrupted.
For example, if 'Byte Rate' is set to 40000 and 'Burst Bytes'
to 50000, then this implies the following: the allowed
bandwidth is 40000 bytes/sec with extra allowance of 50000
bytes; if, for example, the actual traffic rate is 45000
bytes/sec, then this allowance wou
seconds, after which all traffic exceeding the allocated
40000 bytes/sec is dropped. If the actual traffic rate then
slowed to 30000 bytes/sec, then the allowance would be
replenished within 5 seconds.
Burst Bytes
CLI: byte-burst
[AccessList_Byte_Burst]
Defines the tolerance of traffic rate limit (number of bytes).
The default is 0.
Action Upon Match
CLI: allow-type
[AccessList_Allow_Type]
Defines the firewall action to be performed upon rule match.
"Allow" = (Default) Permits these packets
"Block" = Rejects these packets
Match Count
[AccessList_MatchCount]
(Read-only) Displays the number of packets accepted or
rejected by the rule.
The table below provides an example of configured firewall rules:
Table 13-2: Configuration Example of Firewall Rules
Parameter
Firewall Rule
1 2 3 4 5
Source IP
12.194.231.76
12.194.230.7 0.0.0.0 192.0.0.0 0.0.0.0
Prefix Length
16 16 0 8 0
Start Port and End
Port
0-65535 0-65535 0-65535 0-65535 0-65535
Protocol
Any Any icmp Any Any
Use Specific
Interface
Enable Enable Disable Enable Disable
Interface Name
WAN WAN None Voice-Lan None
To Next Page
Loading...
