Alibaba Cloud SAG-1000, Configuration Manual

Page: 19 / 23

Smart Access Gateway SAG-1000 Configuration Guide / 3 Web configuration
Configuration Description
Area Type The area type is NSSA by default.
3.5 Step 5: Configure ACL (optional)
You can add security group rules to manage the intranet traffic of local branches.
Procedure
1. Log on to the web configuration page of the Smart Access Gateway device.
2. After the WAN port is configured, click Next to configure ACL.
3. Select a rule direction, and then click Add Rule to configure security rules.
Configuration Description
Rule direction
• Outbound: Traffic sent from the local branch connected to
Smart Access Gateway.
• Inbound: Traffic sent to the local branch connected to
Smart Access Gateway.
Source address
• Outbound: The private CIDR block of the local branch that
initiates the access.
• Inbound: The private CIDR block that accesses the local
branch.
Destination
address
• Outbound: The external destination CIDR block to be
accessed.
• Inbound: The destination CIDR block of the local branch
to access.
Source port The source port range of the transport layer. 0/65535
represents all ports.
Protocol type The transport layer protocol.
Destination port The destination port range of the transport layer. 0/65535
represents all ports.
Authorization
policy Select Allow or Deny.
Priority Valid range: 1 ~ 100. The smaller the number, the higher
the priority. If the priority of two rules is the same, the rule
added earlier takes effect.
Issue: 20190228 11