Black Box RAS-PutIn, Инструкция по установке и эксплуатации

Страница: 70 / 93

58 CHAPTER 5. USAGE
ˆ
Rule Number
This should contain the number of a rule for which the following commands will apply.
This field will be ignored, in case of appending a new rule.
ˆ
IP/Mask
Specifies the IP address or IP address range for which the rule applies.
Examples (the number concatenated to an IP address with a ‘/’ is the number of valid
bits that will be used of the given IP address):
192.168.1.22/32 matches the IP Address 192.168.1.22
192.168.1.0/24 matches all IP packets with source addresses from 192.168.1.0 to 192.168.1.255
0.0.0.0/0 matches any IP packet
ˆ
Policy
The policy determines what to do with matching packets. They can be accepted or
dropped.
NOTE: The order of the rules is important. The rules are checked in ascending order until
a rule matches. All the rules below the matching one will be ignored. The default policy
applies if no match has been found.
ˆ
Appending a rule
Enter the IP/Mask and set the policy. Finally, press ‘Append’.
ˆ
Inserting a rule
Enter the rule number, the IP/Mask and set the policy. Finally, press ‘Insert’.
ˆ
Replacing a rule
Enter the rule number, the IP/Mask and set the policy. Finally, press ‘Replace’.
ˆ
Deleting a rule
Enter the rule number and press ‘Delete’.
5.5.11 SSL Certificate Management
RAS-PutIn uses the SSL
5
protocol for any encrypted network traffic between itself and a con-
nected client. During connection establishment, RAS-PutIn has to expose its identity to a client
using a cryptographic certificate. Upon delivery, this certificate is the same for all RAS-PutIns
ever produced and certainly won’t match the network configurations that will be applied to the
devices by its user. The certificate’s underlying secrete (private) key is also used for securing
the SSL handshake. Hence, this is a security risk (but far better than no encryption at all).
ˆ
Common name
This is the network name of RAS-PutIn once it is installed in the user’s network (usually
the fully qualified domain name). It is identical to the name that is used to access the
device with a web browser (without the ‘http://’ prefix). In case the name given here
and the actual network name differ, the browser will pop up a security warning when the
device is accessed over HTTPS.
5
SSL — Secure Socket Layer