Radware Alteon User Manual

Alteon Application Switch Operating System Application Guide
Filtering and Traffic Manipulation
394 Document ID: RDWR-ALOS-V2900_AG1302
4. Configure a filter that allows trusted HTTP traffic from the Internet to pass through Alteon to the
Web servers.
5. Configure a filter that allows HTTP responses from the Web servers to pass through Alteon to the
Internet.
6. Configure a default filter which denies all other traffic. This filter is required.
>> Filter 16# dmask 255.255.255.0
(To the entire subnet range)
>> Filter 16# dport any
(To any destination port)
>> Filter 16# action allow
(Allow matching traffic to pass)
>> Filter 16# ena
(Enable the filter)
>> Filter 16# adv/tcp
(Select the advanced TCP menu)
>> Filter 16 Advanced# ack ena
(Match acknowledgments only)
>> Filter 16 Advanced# psh ena
(Match acknowledgments only)
>> Filter 16 Advanced# /cfg/slb/filt 17
(Select a filter for incoming HTTP traffic)
>> Filter 17# sip any
(From any source IP address)
>> Filter 17# sport http
(From well-known source HTTP port)
>> Filter 17# proto tcp
(For TCP traffic)
>> Filter 17# dip 203.122.186.0
(To the Web servers' IP address)
>> Filter 17# dmask 255.255.255.0
(To the entire subnet range)
>> Filter 17# dport http
(To well-known destination HTTP port)
>> Filter 17# action allow
(Allow matching traffic to pass)
>> Filter 17# ena
(Enable the filter)
>> Filter 17# /cfg/slb/filt 18
(Select a filter for outgoing HTTP traffic)
>> Filter 18# sip 203.122.186.0
(From the Web servers' source IP
address)
>> Filter 18# smask 255.255.255.0
(From the entire subnet range)
>> Filter 18# sport http
(From well-known source HTTP port)
>> Filter 18# proto tcp
(For TCP traffic)
>> Filter 18# dip any
(To any destination IP address)
>> Filter 18# dport http
(To well-known destination HTTP port)
>> Filter 18# action allow
(Allow matching traffic to pass)
>> Filter 18# ena
(Enable the filter)
>> Filter 18# /cfg/slb/filt 2048
(Select a default filter)
>> Filter 2048# sip any
(From any source IP address)
>> Filter 2048# dip any
(To any destination IP address)
>> Filter 2048# action deny
(Block matching traffic)
>> Filter 2048# name deny matching traffic
(Provide a descriptive name for the filter)
>> Filter 2048# ena
(Enable the filter)

Radware Alteon Specifications

General

Model	Alteon
Manufacturer	Radware
Layer	Layer 4-7
Type	Application Delivery Controller (ADC)
Features	Load balancing, SSL offloading, application acceleration, DDoS protection
Form Factor	Virtual Appliance