Alcatel AST570, User Manual

Page: 225 / 300

Configuring the AST570
Firewall
Default AST570
Firewall configuration
17 Security Services - Firewalling
225 / 300
3EC 17766 AAAA TCZZA Ed. 04
17.6 Firewall Configuration
In order to create a Firewall, suitable for your needs, you can
create a chain on every hook at the AST570 . In each chain rules
can be applied with configurable parameters. Rules can also refer
to a previously defined access list, thus allowing nested access
lists, or chains.
You can configure the
AST570 firewall only via the CLI.
See chapter 22 for more information.
The AST570 Firewall is enabled by default with following
behavior:
Packets migrating
from WAN to WAN are dropped
from AST570 to WAN are dropped, except Port 53 (DNS)
from AST570 to (W)LAN are allowed
from (W)LAN to AST570 are allowed
from (W)LAN to WAN are allowed
from WAN to (W)LAN are allowed
from a remote LAN to local (W)LAN are allowed
from local (W)LAN to a remote LAN are allowed.