User's Manual 166 Document #: LTRT-27045
Mediant 1000B Gateway & E-SBC
Parameter Description
50000, then this implies the following: the allowed bandwidth is
40000 bytes/sec with extra allowance of 50000 bytes; if, for
example, the actual traffic rate is 45000 bytes/sec, then this
allowance would be consumed within 10 seconds, after which
all traffic exceeding the allocated 40000 bytes/sec is dropped.
If the actual traffic rate then slowed to 30000 bytes/sec, then
the allowance would be replenished within 5 seconds.
Burst Bytes
byte-burst
[AccessList_Byte_Burst]
Defines the tolerance of traffic rate limit (number of bytes).
The default is 0.
Statistics
Match Count
[AccessList_MatchCount]
(Read-only) Displays the number of packets accepted or
rejected by the rule.
The table below provides an example of configured firewall rules:
Table 13-2: Configuration Example of Firewall Rules
Parameter
Firewall Rule
1 2 3 4 5
Source IP
12.194.231.76
12.194.230.7 0.0.0.0 192.0.0.0 0.0.0.0
Prefix Length
16 16 0 8 0
Start Port and End
Port
0-65535 0-65535 0-65535 0-65535 0-65535
Protocol
Any Any icmp Any Any
Use Specific
Interface
Enable Enable Disable Enable Disable
Interface Name
WAN WAN None Voice-Lan None
Byte Rate
0 0 40000 40000 0
Burst Bytes
0 0 50000 50000 0
Action Upon Match
Allow Allow Allow Allow Block
The firewall rules in the above configuration example do the following:
Rules 1 and 2: Typical firewall rules that allow packets ONLY from specified IP
addresses (e.g., proxy servers). Note that the prefix length is configured.
Rule 3: A more "advanced” firewall rule - bandwidth rule for ICMP, which allows a
maximum bandwidth of 40,000 bytes/sec with an additional allowance of 50,000 bytes.
If, for example, the actual traffic rate is 45,000 bytes/sec, then this allowance would be
consumed within 10 seconds, after which all traffic exceeding the allocated 40,000
bytes/sec is dropped. If the actual traffic rate then slowed to 30,000 bytes/sec, the
allowance would be replenished within 5 seconds.
Rule 4: Allows traffic from the LAN voice interface and limits bandwidth.
Rule 5: Blocks all other traffic.
To Next Page
Loading...
Need help?
General
