Overview Of Rule Criteria; Editing And Creating Rules; Rule Criteria - Avaya G350 Administration

Configuring policy
Defining rules

Overview of rule criteria

You can configure policy rules to match packets based on one or more of the following criteria:
•
Source IP address, or a range of addresses
•
Destination IP address or a range of addresses
•
IP protocol, such as TCP, UDP, ICMP, IGMP
•
Source TCP or UDP port or a range of ports
•
Destination TCP or UDP port or a range of ports
•
ICMP type and code
Use IP wildcards to specify a range of source or destination IP addresses. The zero bits in the wildcard
correspond to bits in the IP address that remain fixed. The one bits in the wildcard correspond to bits in
the IP address that can vary. Note that this is the opposite of how bits are used in a subnet mask.
For access control lists, you can require the packet to be part of an established TCP session. If the packet
is a request for a new TCP session, the packet does not match the rule. You can also specify whether an
access control list accepts packets that have an IP option field.

Editing and creating rules

To create or edit a policy rule, you must enter the context of the rule. If the rule already exists, you can
edit the rule from the rule context. If the rule does not exist, entering the rule context creates the rule.
To enter a rule context:
1
Enter the context of the list in which you want to create or edit a rule.
2
Type the command
example, to create rule 1, type
To view the existing rules in a list, enter the list's context and type
default rule. Each new rule has the same default parameters as the default rule. The default rule appears
as follows:
Index Protocol
----- -------- --- ---------------- --------------- ------------ -------
Deflt Any
This rule permits all packets.

Rule criteria

This section describes the rule criteria you can define and includes the following topics:
•
IP protocol
•
Source and destination IP address
addresses to which the rule applies
•
Source and destination port range
ranges to which the rule applies
166
ip-rule , followed by the number of the rule you want to create or edit. For
ip-rule 1
IP
Src Any
Dst Any
— instructions on how to define the protocol to which the rule applies
— instructions on how to define the source and destination IP
— instructions on how to define the source and destination port
.
ip show-rule
Wildcard Port
Any
Any
Administration of the Avaya G350 Media Gateway
. Each list starts with a
Operation
Permit
June 2004