Avaya Cajun P580, Руководство пользователя, Страница: 414 / 770

13-4 User Guide for the Avaya P580 and P882 Multiservice Switches, v6.0
Chapter 13
The Acknowledge bit in the TCP header, when 0, indicates that the packet is
an initial “call” to the destination. The host sending the message will clear
the bit (0). The host that responds to the message will set the bit(1)
indicating this message is a response. Effectively the call is now
“Established”. All subsequent packets between these two hosts for this
session will have the Acknowledge bit set.
For example: Suppose the Avaya Multiservice switch has interfaces to
“Outside” networks as well as interfaces to “Inside” networks. The Outside
networks need access to a web server and should be denied access to any
other resource within the Inside network.
Hosts on the Inside networks should have full access to all other resources
on the Inside.
The Web server itself should not be able to establish any new connections to
the Outside but should be able to pass traffic to the other Inside networks.
Assume the following abbreviations:
WS = Web Server.
IN = Inside Networks
ON = Outside Networks
Any = Both Inside and Outside Networks
The rules for implementing the above restrictions would be as follows:
Rule # Rule TCP
Established
1 allow Any to call WS dest port 80 Un-Checked
2 allow WS to respond Checked
3 allow WS to IN Un-Checked