AudioCodes Mediant 4000 SBC, User Manual

Page: 675 / 1037

CHAPTER 32 HA Configuration
Mediant 4000 SBC | User's Manual
Table 32-1: Allowed Firewall Rules for HA
Ind-
ex
Source
IP
Sou-
rce
Port
Pre-
fix
Len-
gth
St-
art
Po-
rt
End
Por-
t
Pro-
tocol
Use
Spe-
cific
Inter-
face
Inter-
face
Name
Acti-
on
Upo-
n
Mat-
ch
Pac-
ket
Size
B-
yt-
e
R-
at-
e
Byt-
e
Bu-
rst
0
... Various rules for basic traffic
9
10 10.31.
4.61 669 32 66
9 669 udp Enab
le HA_
IF Allo
w 0 0 0
11 10.31.
4.62 669 32 66
9 669 udp Enab
le HA_
IF Allo
w 0 0 0
12 10.31.
4.61 0 32 24
42 244
2 tcp Enab
le HA_
IF Allo
w 0 0 0
13 10.31.
4.62 0 32 24
42 244
2 tcp Enab
le HA_
IF Allo
w 0 0 0
14 10.31.
4.61 80 32 0 655
35 tcp Enab
le HA_
IF Allo
w 0 0 0
15 10.31.
4.62 80 32 0 655
35 tcp Enab
le HA_
IF Allo
w 0 0 0
16 10.31.
4.61 670 32 68
0 680 udp Enab
le HA_
IF Allo
w 0 0 0
17 10.31.
4.62 670 32 68
0 680 udp Enab
le HA_
IF Allo
w 0 0 0
18 0.0.0.0 0 0 0 655
35 Any Disa
ble -- Blo
ck 0 0 0
● The index numbers in the table above may change according to your specific allow
and block rules.
● The last rule (Index 18) is an example of a blocking traffic rule (blocks all other
traffic).
● Configure the firewall on the Active device. This configuration is automatically
applied to the Redundant device.
● If you have an external firewall located between the Active and the Redundant HA
Maintenance interfaces, you must open (allow) the same port ranges as configured
in the table above, on that external firewall.
● If the device needs to communicate with AudioCodes OVOC, you must also add
rules to allow incoming traffic from OVOC. For more information, see
Configuring
Firewall Rules to Allow Incoming OVOC Traffic on page 142.
- 642 -