Radware Alteon User Manual

Alteon Application Switch Operating System Application Guide
Advanced Denial of Service Protection
Document ID: RDWR-ALOS-V2900_AG1302 603
Configuring Blocking with IP Access Control Lists
The following is an example procedure for configuring blocking with IP access control lists.
To configure blocking with IP ACLs
1. Add the IP addresses that you want to block.
— The following example blocks source addresses 192.168.40.0-255:
— The following example blocks destination addresses 192.180.11.0-255:
2. Repeat step 1
to configure any other IP addresses that should be dropped.
3. Enable IP ACL processing on the ingress port.
4. Apply and save the configuration.
Viewing IP ACL Statistics
You can view the accumulated blocked packets for each IP address /mask pair by entering the
following command:
>> Main # /cfg/security/ipacl
>> IP ACL# add 192.168.40.0
Enter IP subnet mask [default is
255.255.255.255]: 255.255.255.0
(Select the IP ACL menu)
(Enter a network address)
(Enter the appropriate mask)
>> Main# /cfg/security/ipacl
>> IP ACL# dadd 192.180.11.0
Enter IP subnet mask [default is
255.255.255.255]: 255.255.255.0
(Select the IP ACL menu)
(Enter a network address)
(Enter the appropriate mask)
>> Main# /cfg/security/port <x> /ipacl ena
Current IP ACL processing: disabled
New IP ACL processing: enabled
>> /stats/security/ipacl/dump
IP ACL stats:
Source IP ACL hits: 3
Source IP Addr Mask Type
--------------- --------------- -----
192.168.1.0 255.255.255.0 cfg
Destination IP ACL hits: 0
Dest IP Addr Mask Type
--------------- --------------- -----
No destination IP ACL's created

Radware Alteon Specifications

General

Model	Alteon
Manufacturer	Radware
Layer	Layer 4-7
Type	Application Delivery Controller (ADC)
Features	Load balancing, SSL offloading, application acceleration, DDoS protection
Form Factor	Virtual Appliance