Version 6.2 89 February 2011
SIP User's Manual 3. Web-Based Management
3.3.2.2 Security
The Security Settings submenu allows you to configure various security settings. This
menu contains the following page items:
îš„ Firewall Settings (see ''Configuring Firewall Settings'' on page 89)
îš„ 802.1x Settings (see "
Configuring 802.1x Settings" on page 92)
îš„ Gene
ral Security Settings (see ''Configuring General Security Settings'' on page 93)
îš„ IPSec Propo
sal Table (see "Configuring IP Security Associations Table" on page 95)
îš„ IPSec Associ
ation Table (see "Configuring IP Security Proposal Table" on page 94)
3.3.2.2.1 Configuring Firewall Settings
The device provides an internal firewall, allowing you (the security administrator) to define
network traffic filtering rules. You can add up to 50 ordered firewall rules.
The access list provides the following firewall rules:
îš„ Block traffic from known malicious sources
îš„ Only allow traffic from known friendly sources, and block all others
îš„ Mix allowed and blocked network sources
îš„ Limit traffic to a pre-defined rate (blocking the excess)
îš„ Limit traffic to specific protocols, and specific port ranges on the device
For each packet received on the network interface, the table is scanned from the top down
until a matching rule is found. This rule can either deny (block) or permit (allow) the packet.
Once a rule in the table is located, subsequent rules further down the table are ignored. If
the end of the table is reached without a match, the packet is accepted. For detailed
information on the internal firewall, refer to the Product Reference Manual.
Notes:
• It is recommended to add a rule at the end of your table that blocks all
traffic and add firewall rules above it (in the table) that allow traffic (with
bandwidth limitations). To block all traffic, the following must be set:
- IP address to 0.0.0.0
- Prefix length of 0 (implies the rule can match any IP address)
- Local port range 0-65535
- Protocol "Any"
- Action Upon Match "block"
• You can also configure the firewall settings using the ini file table
parameter AccessList (see ''Security Parameters'' on page 356).
To Next Page
Loading...
Need help?
General
