Nortel BSR252, Конфигурация - Основы

Страница: 177 / 460

Chapter 11 Firewall screens 177
Nortel Business Secure Router 252 Configuration — Basics
Bypass Triangle
Route
Select this check box to have the Business Secure Router permit the
use of asymmetrical route topology on the network (not reset the
connection).
Firewall Rules
Storage Space in
Use
This read-only bar shows how much of the Business Secure Router's
memory for recording firewall rules is currently being used. The bar
turns from green to red when the maximum is approached. You can
typically configure up to ten rules per traffic direction.
Packet Direction Use the drop-down list to select a direction of travel of packets for
which you want to display firewall rules.
Block/
Forward
Use the option buttons to select whether to Block (silently discard) or
Forward (allow the passage of) packets that are traveling in the
selected direction.
Log packets that
don’t match these
rules.
Select the check box to create a log (when the above action is taken)
for packets that are traveling in the selected direction and do not
match any of the rules below.
The following read-only fields summarize the rules you have created
that apply to traffic traveling in the selected packet direction. The
firewall rules that you configure (summarized below) take priority
over the general firewall action settings above.
# This is your firewall rule number. The ordering of your rules is
important as rules are applied in turn. The Move field allows you to
reorder your rules.
Status This field displays whether a firewall is turned on ( Active ) or not
( Inactive ). Rules that have not been configured display Empty .
Source Address This drop-down list displays the source addresses or ranges of
addresses to which this firewall rule applies. Note that a blank source
or destination address is equivalent to Any .
Destination
Address
This drop-down list displays the destination addresses or ranges of
addresses to which this firewall rule applies. Note that a blank source
or destination address is equivalent to Any .
Service Type This drop-down list displays the services to which this firewall rule
applies. Note that a blank service type is equivalent to Any . For more
information, see Table 40 on page 187 .
Action This is the specified action for the selected rule, either Block or
Forward . Note that Block means the firewall silently discards the
packet.
Log This field shows you if a log is created for packets that match the rule
( Match ), don't match the rule ( Not Match ), both ( Both ), or no log is
created ( None ).
Alert This field tells you whether this rule generates an alert ( Yes ) or not
( No ) when the rule is matched.
Table 36 Firewall rules summary: First screen
Label Description