Raritan EMX2-888, Руководство пользователя

Страница: 173 / 568

Chapter 6: Using the Web Interface
159
b. Ensure the Enable IPv6 Access Control checkbox is selected.
c. Locate the Default Policy field in the Inbound Rules section.
d. The default policy is shown in the Default Policy field. To change
it, select a different policy from the drop-down list.
 Accept: Accepts traffic from all IPv6 addresses.
 Drop: Discards traffic from all IPv6 addresses, without
sending any failure notification to the source host.

Reject: Discards traffic from all IPv6 addresses, and an ICMP
message is sent to the source host for failure notification.
4. Click OK. The new default policy is applied.
To change the default policy for outbound traffic:
Locate the Outbound Rules section on the IPv4 or IPv6 tab and then
follow the above procedure to set up its Default Policy field by
selecting one of the following options.
 Accept: Permits traffic sent from the EMX to all IP addresses.
 Drop: Discards traffic sent from the EMX to all IP addresses,
without sending any failure notification to the destination host.
 Reject: Discards traffic sent from the EMX to all IP addresses,
and an ICMP message is sent to the destination host for failure
notification.
Creating Firewall Rules
Firewall rules determine whether to accept or discard traffic to/from the
EMX, based on the IP address of the host sending or receiving the traffic.
When creating firewall rules, keep these principles in mind:

Rule order is important.
When traffic reaches or is sent from the EMX device, the rules are
executed in numerical order. Only the first rule that matches the IP
address determines whether the traffic is accepted or discarded. Any
subsequent rules matching the IP address are ignored by the EMX.

Subnet mask is required.
When typing the IP address, you must specify BOTH the address
and a subnet mask. For example, to specify a single address in a
Class C network, use this format:
x.x.x.x/24
where
/24
= a subnet mask of 255.255.255.0.
To specify an entire subnet or range of addresses, change the
subnet mask accordingly.