Raritan EMX2-888, Руководство пользователя

Страница: 172 / 568

Chapter 6: Using the Web Interface
158
Enabling the Firewall
The firewall rules, if any, take effect only after the firewall is enabled.
To enable the EMX firewall:
1. Choose Device Settings > Security > IP Access Control. The
Configure IP Access Control Settings dialog appears.
2. To enable the IPv4 firewall, click the IPv4 tab, and select the Enable
IPv4 Access Control checkbox.
3. To enable the IPv6 firewall, click the IPv6 tab, and select the Enable
IPv6 Access Control checkbox.
4. Click OK.
Changing the Default Policy
After enabling the firewall, the default policy is to accept traffic from/to all
IP addresses. This means only IP addresses discarded by a specific rule
will NOT be permitted to access the EMX or receive any data from the
EMX.
You can change the default policy to Drop or Reject, in which case traffic
to/from all IP addresses is discarded except the IP addresses accepted
by a specific rule.
Default policies for inbound and outbound traffic can be different.
To change the default policy for inbound traffic:
1. Choose Device Settings > Security > IP Access Control. The
Configure IP Access Control Settings dialog appears.
2. To determine the default policy for IPv4 addresses:
a. Click the IPv4 tab if necessary.
b. Ensure the Enable IPv4 Access Control checkbox is selected.
c. Locate the Default Policy field in the Inbound Rules section.
d. The default policy is shown in the Default Policy field. To change
it, select a different policy from the drop-down list.
 Accept: Accepts traffic from all IPv4 addresses.
 Drop: Discards traffic from all IPv4 addresses, without
sending any failure notification to the source host.

Reject: Discards traffic from all IPv4 addresses, and an ICMP
message is sent to the source host for failure notification.
3. To determine the default policy for IPv6 addresses:
a. Click the IPv6 tab.