Avaya Cajun P580, Руководство пользователя, Страница: 424 / 770

13-14 User Guide for the Avaya P580 and P882 Multiservice Switches, v6.0
Chapter 13
8. Specify the TCP protocol ID = 6. If you specify TCP or UDP port
numbers, you must specify Protocol ID 6 or 17 respectively.
9. Enter the following in the TCP/UDP Destination Port field:
—
a Min. of 80 (HTTP).
—
a Max. of 80 (HTTP).
10. Leave the TCP/UDP Source Port field alone:
—
a Min. of 0 (HTTP).
—
a Max. of 65536 (HTTP).
11. Select TCP Established. A check mark displays in the check box.
12. Click CREATE to save your changes, or CANCEL to restore previous
settings.
Each time any end user attempts to access the web server specified by the
destination TCP/UDP ports, all web requests are filtered.
Second Example
Filtering Traffic Between 10.1.1.0 and 10.1.2.0 Subnets. It is possible to
filter traffic to either a specific address or to an entire subnet. In this
example, all traffic between the two subnets is filtered:
This example also assumes that the network is a Class C sub network
(255.255.255.0).
To filter traffic between both subnets, you must create two access rules.
To create the Extended Access list and rules:
1. Select Access Lists from the Routing > IP > Configuration group on
the web Agent window. The IP Access List dialog box opens
(
Figure 13-1 ).
2. Select Create Extended. The IP Extended Access Rule Creation
dialog box opens ( Figure 13-3 ).
3. Enter a number between 100 and 199 (or Alphanumeric) (extended
ACL) in the Access List Name field to identify your new access control
list.
4. Enter a number in the Access Rule Index file to identify the access rule.
5. Select Deny/Filter from the Access Type field pull-down menu.
6. Enter the source address (10.1.2.0) and the source address wildcard
(0.0.0.255), respectively, in the Source Address field.