Radware Alteon, Application Manual

Page: 395 / 842

Alteon Application Switch Operating System Application Guide
Filtering and Traffic Manipulation
Document ID: RDWR-ALOS-V2900_AG1302
395
7. Apply the filters to the appropriate ports.
Note: After port filtering is enabled or disabled and you apply the change, session entries are
deleted immediately.
Matching ICMP Message Types
This section describes the ICMP message types. The Internet Control Message Protocol (ICMP) is
used for reporting TCP/IP processing errors. There are numerous types of ICMP messages, as shown
in
Table 33 - ICMP Supported Message Types, page 395 . Although ICMP packets can be filtered
using the
proto icmp
option, by default, Alteon ignores the ICMP message type when matching a
packet to a filter. To perform filtering based on specific ICMP message types, ICMP message type
filtering must be enabled.
>> Filter 2048# /cfg/slb/port 1
(Select the Internet-side port)
>> SLB port 1# add 15
(Add the SMTP ACK filter to the port)
>> SLB port 1# add 16
(Add the incoming HTTP filter)
>> SLB port 1# add 17
(Add the incoming HTTP filter)
>> SLB port 1# add 2048
(Add the default filter to the port)
>> SLB port 1# filt ena
(Enable filtering on the port)
>> SLB port 1# /cfg/slb/port 2
(Select the first Web server port)
>> SLB port 2# add 10
(Add the outgoing SMTP filter to the
port)
>> SLB port 2# add 18
(Add the outgoing HTTP filter to the
port)
>> SLB port 2# add 2048
(Add the default filter to the port)
>> SLB port 2# filt ena
(Enable filtering on the port)
>> SLB port 2# /cfg/slb/port 3
(Select the other Web server port)
>> SLB port 3# add 10
(Add the outgoing SMTP filter to the
port)
>> SLB port 3# add 18
(Add the outgoing HTTP filter to the
port)
>> SLB port 3# add 2048
(Add the default filter to the port)
>> SLB port 3# filt ena
(Enable filtering on the port)
>> SLB port 3# apply
(Apply the configuration changes)
>> SLB port 3# save
(Save the configuration changes)
Table 33: ICMP Supported Message Types
Type # Message Type Description
0 echorep ICMP echo reply
3 destun ICMP destination unreachable
4 quench ICMP source quench