Beta Draft Confidential
20-4
1/19/05
ATM Services Configuration Guide for CBX 3500, CBX 500, GX 550, and B-STDX 9000
Port Security Screening
Configuration Overview
Security Screens
The security screens you assign to a logical port represent exceptions to the default
screens. You can assign up to 16 security screens per logical port. Once you assign
security screens to a port and set the ingress/egress screen mode to All Screens, the
logical port uses these security screens to screen SVCs that match the criteria they
specify.
You define a security screen based on two attributes:
•
SVC direction — Defines the SVCs to which this screen applies, either ingress
(incoming) or egress (outgoing).
•
Screen type — Determines whether or not the port passes or blocks these SVCs.
About Security Screen Addresses
To provide a more detailed level of SVC screening, you can specify either an E.164 or
X.121-style address for calling or called addresses, or an NSAP AESA-style address
for calling or called subaddresses. You can enter the entire address as a number, or
enter a UNIX-style expression using wildcards. When you use a UNIX expression, a
single screen can match multiple endpoint addresses. Use the ? wildcard to replace a
single digit or the * wildcard to replace one or more digits. You can only use the *
wildcard once in a string. See
“Address Formats” on page 16-2
for more information
about addressing.
The following examples show how you can use a UNIX expression to represent an
E.164 North American address.
Example
Description
1508952*
This screen applies to all numbers using area code 508 and exchange
number 952.
1508952148?
This screen applies to all numbers using area code 508, exchange number
952, and an extension starting with 148 (for example, 1480 – 1489).
150895?*5?
This screen applies to all numbers using area code 508, with an exchange
number value of 950 – 959. The number 5 must appear as one digit from
the end of the address.
Содержание CBX 3500
Страница 888: ......