Chapter 14 Firewall
158
The following table describes the labels in this screen.
Table 62
Security > Firewall > Rules > Add
LABEL
DESCRIPTION
Active
Select this option to enable this firewall rule.
Action for Matched
Packets
Use the drop-down list box to select whether to discard (
Drop
), deny
and send an
ICMP destination-unreachable message to the sender of (
Reject
) or allow the
passage of (
Permit
) packets that match this rule.
IP Version Type
Select the IP version,
IPv4
or
IPv6
, to apply this firewall rule to.
Rate Limit
Set a maximum number of packets per second, minute, or hour to limit the
throughput of traffic that matches this rule.
Maximum Burst
Number
Set the maximum number of packets that can be sent at the peak rate.
Log
This field determines if a log for packets that match the rule is created or not.
Rules/Source Address
Address Type
Do you want your rule to apply to packets with a particular (single) IP, a range of IP
addresses (for instance, 192.168.1.10 to 192.169.1.50), a subnet or any IP address?
Select an option from the drop-down list box that includes:
Single Address
,
Range
Address
,
Subnet Address
and
Any
Address
.
Start IP Address
Enter the single IP address or the starting IP address in a range here.
End IP Address
Enter the ending IP address in a range here.
Subnet Mask
Enter the subnet mask here, if applicable.
Source Mac Address
Specify a source MAC address of traffic to which to apply this firewall rule applies.
Please note that a blank source MAC address is equivalent to any.
Destination Address
Address Type
Do you want your rule to apply to packets with a particular (single) IP, a range of IP
addresses (for instance, 192.168.1.10 to 192.169.1.50), a subnet or any IP address?
Select an option from the drop-down list box that includes:
Single Address
,
Range
Address
,
Subnet Address
and
Any
Address
.
Start IP Address
Enter the single IP address or the starting IP address in a range here.
End IP Address
Enter the ending IP address in a range here.
Subnet Mask
Enter the subnet mask here, if applicable.
Source Interface
Specify a source interface to which this firewall rule applies. This is the interface
through which the traffic entered the Device. Please note that a blank source
interface is equivalent to any.
Service
Available Services
Select a service from the
Available Services
box.
