Cisco VPN 3000, Руководство пользователя

Страница: 268 / 502

13
Policy Management
13-18 VPN 3000 Concentrator Series User Guide
Range = To specify a range of port numbers, or to specify a port not on the Cisco-supplied list, select
Range here (the default selection) and enter—in the Range [start] to [end] fields—the inclusive range
of port numbers that this rule applies to. To specify a single port number, enter the same number in
both fields. Defaults are
0
to
65535
(all ports). The Range fields are ignored if you select a specific
port from the drop-down list.
TCP/UDP Destination Port
If you select TCP or UDP under Protocol above, select the destination port number that this rule checks.
See the explanation of port numbers under TCP/UDP Source Port above.
Port or Range
Click the drop-down menu button and select the process (port number). The choices are the same as
listed under
TCP/UDP Source Port , Port or Range above.
ICMP Packet Type
The ICMP protocol has many messages that are identified by a type number. For example:
0 = Echo Reply
8 = Echo
13 = Timestamp
14 = Timestamp Reply
17 = Address Mask Request
18 = Address Mask Reply
The Internet Assigned Numbers Authority (IANA) manages these ICMP type numbers.
If you selected ICMP under Protocol above, enter the range of ICMP packet type numbers that this rule
applies to. To specify a single packet type, enter the same number in both fields. Defaults are
0
to
255
(all packet types). For example, to specify the
Timestamp
and
Timestamp Reply
types only, enter
13
to
14
.
Add or Apply / Cancel
To add this rule to the list of configured filter rules, click Add . Or to apply your changes to this rule, click
Apply . On the Modify screen, any changes take effect as soon as you click Apply . If the rule is being used
by an active filter, changes may affect tunnel traffic. The Manager returns to the Configuration | Policy
Management | Traffic Management | Rules screen. Any new rule appears in the Filter Rules list.
Reminder: The Manager immediately includes your changes in the active configuration. To save the active
configuration and make it the boot configuration, click the
Save Needed icon at the top of the Manager
window.
To discard your entries, click Cancel . The Manager returns to the Configuration | Policy Management | Traffic
Management | Rules screen, and the Filter Rules list is unchanged.