Policies and Filters
December 2000
C - 21
•
If you configure them on Layer 2 and Layer 3 Switches, you specify the source and destination IP address of
the hosts or servers for which you are controlling access.
•
If you configure Layer 4 policies on a ServerIron configured for Server Load Balancing (SLB), you specify the
virtual IP address (VIP) associated with the real servers.
Figure C.3 shows an example of TCP/UDP access policies. Although this example does not explicitly identify
these policies as inbound policies or outbound policies, when you apply the policies to individual ports you specify
whether they are for inbound or outbound traffic.
Figure C.3
TCP/UDP Access Policies
Actions
TCP/UDP access policies forward (permit) or drop (deny) IP packets based on the Layer 4 application information
in the packets.
Scope
You configure TCP/UDP access policies globally, then apply them to individual ports. When you apply a TCP/
UDP policy to a port, you specify whether the policy applies to inbound or outbound packets. You can use the
same policy in a port’s inbound policy group and outbound policy group. When you configure a policy group, you
3
5
4
2
Link
Activity
6
1
7
8
Link
Activity
Link
Activity
Link
Activity
1 2 3 4 5 6 7 8 9 10 11 12
13 14 15 16 17 18 19 20 21 22 23 24
Link
Activity
Link
Activity
Link
Activity
Link
Activity
3
5
4
2
6
1
7
8
1 2 3 4 5 6 7 8 9 10 11 12
13 14 15 16 17 18 19 20 21 22 23 24
3
5
4
2
Link
Activity
6
1
7
8
Link
Activity
Link
Activity
Link
Activity
3
5
4
2
Link
Activity
6
1
7
8
Link
Activity
Link
Activity
Link
Activity
3
5
4
2
Link
Activity
6
1
7
8
Link
Activity
Link
Activity
Link
Activity
Link
Activity
13
6
7
8
5
4
2
Pwr
Link
Activity
Link
Activity
Link
Activity
TCP/UDP Access Policy Group for Port 3/1
PolicyID Action Source Destination
TCP/UDP Port
--------------------------------------------------------------------------------------------------------------
3 Deny 209.157.22.26/24 any
17
Deny 209.157.22.14/24 any
34 Deny 209.157.22.26/24 201.21.2.7/24 tcp eq ftp
1024 Permit any any
Source:
209.157.22.69/24
Dest:
201.21.2.7/24
TCP eq FTP
201.21.2.7/24
Source:
192.168.69.69/24
Dest:
201.21.2.7/24
TCP eq FTP
Source:
209.157.22.69/24
Dest:
201.21.2.7/24
TCP eq FTP
Source:
209.157.22.11/24
Dest:
201.21.2.7/24
TCP eq HTTP
Permitted
Server
--HTTP
--FTP
Denied
Denied
Bit
Bucket
Source:
209.157.22.26/24
Dest:
201.21.2.7/24
TCP eq HTTP
Summary of Contents for Switch and Router
Page 2: ...December 2000 Copyright 2000 by Foundry Networks Inc ...
Page 26: ...Foundry Switch and Router Installation and Configuration Guide xxvi December 2000 ...
Page 64: ...Foundry Switch and Router Installation and Configuration Guide 2 34 December 2000 ...
Page 162: ...Foundry Switch and Router Installation and Configuration Guide 5 38 December 2000 ...
Page 196: ...Foundry Switch and Router Installation and Configuration Guide 6 34 December 2000 ...
Page 208: ...Foundry Switch and Router Installation and Configuration Guide 7 12 December 2000 ...
Page 236: ...Foundry Switch and Router Installation and Configuration Guide 8 28 December 2000 ...
Page 258: ...Foundry Switch and Router Installation and Configuration Guide 9 22 December 2000 ...
Page 420: ...Foundry Switch and Router Installation and Configuration Guide 13 32 December 2000 ...
Page 442: ...Foundry Switch and Router Installation and Configuration Guide 14 22 December 2000 ...
Page 554: ...Foundry Switch and Router Installation and Configuration Guide 15 112 December 2000 ...
Page 574: ...Foundry Switch and Router Installation and Configuration Guide 16 20 December 2000 ...
Page 626: ...Foundry Switch and Router Installation and Configuration Guide 17 52 December 2000 ...
Page 682: ...Foundry Switch and Router Installation and Configuration Guide 18 56 December 2000 ...
Page 826: ...Foundry Switch and Router Installation and Configuration Guide 20 20 December 2000 ...
Page 994: ...Foundry Switch and Router Installation and Configuration Guide 26 10 December 2000 ...
Page 1004: ...Foundry Switch and Router Installation and Configuration Guide B 6 December 2000 ...
Page 1044: ...Foundry Switch and Router Installation and Configuration Guide C 40 December 2000 ...
Page 1048: ...Foundry Switch and Router Installation and Configuration Guide D 4 December 2000 ...
Page 1070: ...Foundry Switch and Router Installation and Configuration Guide Index 18 December 2000 ...