AudioCodes Mediant 500 E-SBC, Руководство пользователя

Страница: 143 / 920

User's Manual 13. Security
Version 6.8 143 Mediant 500 E-SBC
Parameter Description
Prefix Length
CLI: prefixLen
[AccessList_PrefixLen]
( Mandatory ) Defines the IP network mask - 32 for a single host or
the appropriate value for the source IP addresses.

A value of 8 corresponds to IPv4 subnet class A (network mask of
255.0.0.0).

A value of 16 corresponds to IPv4 subnet class B (network mask
of 255.255.0.0).

A value of 24 corresponds to IPv4 subnet class C (network mask
of 255.255.255.0).
The IP address of the sender of the incoming packet is trimmed in
accordance with the prefix length (in bits) and then compared to the
parameter ‘Source IP’.
The default is 0 (i.e., applies to all packets). You must change this
value to any of the above options.
Note: A value of 0 applies to all packets, regardless of the defined IP
address. Therefore, you must set this parameter to a value other
than 0.
Start Port
CLI: start-port
[AccessList_Start_Port]
Defines the destination UDP/TCP start port (on this device) to where
packets are sent.
The valid range is 0 to 65535.
Note: When the protocol type isn't TCP or UDP, the entire range
must be provided.
End Port
CLI: end-port
[AccessList_End_Port]
Defines the destination UDP/TCP end port (on this device) to where
packets are sent.
The valid range is 0 to 65535.
Note: When the protocol type isn't TCP or UDP, the entire range
must be provided.
Protocol
CLI: protocol
[AccessList_Protocol]
Defines the protocol type (e.g., UDP, TCP, ICMP, ESP or 'Any') or
the IANA protocol number in the range of 0 (Any) to 255.
Note: This field also accepts the abbreviated strings 'SIP' and
'HTTP'. Specifying these strings implies selection of the TCP or UDP
protocols, and the appropriate port numbers as defined on the
device.
Use Specific Interface
CLI: use-specific-interface
[AccessList_Use_Specific_I
nterface]
Determines whether you want to apply the rule to a specific network
interface defined in the Interface table (i.e., packets received from
that defined in the Source IP field and received on this network
interface):

[0] Disable (default)

[1] Enable
Notes:

If enabled, then in the 'Interface Name' field (described below),
select the interface to which the rule is applied.

If disabled, then the rule applies to all interfaces.
Interface Name
CLI: network-interface-name
[AccessList_Interface_x]
Defines the network interface to which you want to apply the rule.
This is applicable if you enabled the 'Use Specific Interface' field.
The list displays interface names as defined in the Interface table in
''Configuring IP Network Interfaces'' on page
115 .
Packet Size
CLI: packet-size
[AccessList_Packet_Size]
Defines the maximum allowed packet size.
The valid range is 0 to 65535.
Note: When filtering fragmented IP packets, this field relates to the