Add / Modify / Copy / Delete - Cisco VPN 3000 User Manual

Table 13-1: Cisco-supplied default filter rules (continued)
Filter Rule Name Direction
Outgoing HTTPS In Inbound
Outgoing HTTPS
Out
PPTP In
PPTP Out
RIP In
RIP Out
Telnet/SSL In
Telnet/SSL Out
VRRP In *
VRRP Out *
*For VRRP In and VRRP Out , the Destination Address is 224.0.0.18/0.0.0.0 , which is the
IANA-assigned IP multicast address for VRRP.

Add / Modify / Copy / Delete

To configure a new rule, click Add . The Manager opens the Configuration | Policy Management | Traffic
Management | Rules | Add
To modify a rule that has been configured, select the rule from the list and click Modify . The Manager
opens the Configuration | Policy Management | Traffic Management | Rules | Modify screen.
To copy a configured rule, modify it, and save it with a new name, select the rule from the list and click
Copy
To delete a configured rule, select the rule from the list and click Delete .
• If the rule is not being used in a filter, the Manager deletes the rule, refreshes the screen, and shows
the remaining rules in the list. There is no confirmation or undo.
• If the rule is being used in a filter, the Manager asks you to confirm the deletion. See the Configuration
| Policy Management | Traffic Management | Rules | Delete
• You cannot delete a rule that is configured as part of a LAN-to-LAN connection. See the Configuration
| System | Tunneling Protocols | IPSec LAN-to-LAN | Add | Done
Note:
Deleting a rule deletes it from every filter that uses it and deletes it from the VPN Concentrator active
configuration. To remove a rule from a filter but retain it in the active configuration, see the Configuration
| Policy Management | Traffic Management | Assign Rules to Filter
Reminder: The Manager immediately includes your changes in the active configuration. To save the active
configuration and make it the boot configuration, click the Save Needed icon at the top of the Manager
window.
VPN 3000 Concentrator Series User Guide
Outbound
Inbound
Outbound
Inbound
Outbound
Inbound
Outbound
Inbound
Outbound
screen.
. See the Configuration | Policy Management | Traffic Management | Rules | Copy screen.
Configuration | Policy Management | Traffic Management | Rules
Protocol TCP
Connection
TCP Don't Care
TCP Don't Care
TCP Don't Care
TCP Don't Care
UDP
UDP
TCP Don't Care
TCP Don't Care
Other 112
Other 112
TCP/UDP TCP/UDP
Source Port Destination Port
HTTPS (443) Range 0-65535
Range 0-65535 HTTPS (443)
Range 0-65535 PPTP (1723)
PPTP (1723) Range 0-65535
RIP (520) RIP (520)
RIP (520) RIP (520)
Range 0-65535 Telnet/SSL (992)
Telnet/SSL (992) Range 0-65535
screen.
screen.
screen.
ICMP
Packet
Type
13-11