AudioCodes Mediant 4000 SBC, User Manual

Page: 173 / 1037

CHAPTER 14 Security
Mediant 4000 SBC | User's Manual
Parameter Description
'Start Port'
start-port
[AccessList_
Start_Port]
Defines the first UDP/TCP port in the range of ports on the device on which
the incoming packet is received. From the perspective of the remote IP
entity, this is the destination port. To configure the last port in the range, see
the 'End Port' parameter (below).
The valid range is 0 to 65535.
Note: When the protocol type isn't TCP or UDP, the entire range must be
provided.
'End Port'
end-port
[AccessList_
End_Port]
Defines the last UDP/TCP port in the range of ports on the device on which
the incoming packet is received. From the perspective of the remote IP
entity, this is the destination port. To configure the first port in the range, see
the 'Start Port' parameter (above).
The valid range is 0 to 65535 (default).
Note: When the protocol type isn't TCP or UDP, the entire range must be
provided.
'Protocol'
protocol
[AccessList_
Protocol]
Defines the protocol type (e.g., UDP , TCP , ICMP , ESP or Any ) or the IANA
protocol number in the range of 0 (Any) to 255. The default is Any .
Note:
■ The parameter also accepts the string value "HTTP", which implies
selection of the TCP or UDP protocols and the appropriate port numbers
as defined on the device.
■ To specify SIP ports, configure rules with the UDP and TCP protocols for
the required SIP Interfaces.
'Use Specific
Interface'
use-
specific-
interface
[AccessList_
Use_
Specific_
Interface]
Determines whether you want to apply the rule to a specific network interface
defined in the IP Interfaces table (i.e., packets received from that defined in
the Source IP field and received on this network interface):
■ [0] Disable = (Default) The rule applies to all interfaces.
■ [1] Enable = The rule applies to a specific interface as specified in the
'Interface Name' field (see below).
'Interface
Name'
network-
interface-
name
[AccessList_
Interface_x]
Defines the network interface to which you want to apply the rule. This is
applicable if you enabled the 'Use Specific Interface' field. The list displays
interface names as defined in the IP Interfaces table in
Configuring IP
Network Interfaces .
Action
'Action Upon
Match'
allow-type
[AccessList_
Allow_Type]
Defines the firewall action to be performed upon rule match.
■ Allow = (Default) Permits the packets.
■ Block = Rejects the packets
- 140 -