AudioCodes Mediant 800B User Manual page 154

Parameter
Packet Size
CLI: packet-size
[AccessList_Packet_Size]
Byte Rate
CLI: byte-rate
[AccessList_Byte_Rate]
Burst Bytes
CLI: byte-burst
[AccessList_Byte_Burst]
Action Upon Match
CLI: allow-type
[AccessList_Allow_Type]
Match Count
[AccessList_MatchCount]
The table below provides an example of configured firewall rules:
Parameter
Source IP
Prefix Length
Start Port and End
Port
Protocol
Use Specific
Interface
Interface Name
Byte Rate
Burst Bytes
Action Upon Match
User's Manual
Defines the maximum allowed packet size.
The valid range is 0 to 65535.
Note: When filtering fragmented IP packets, this field relates to the
overall (re-assembled) packet size, and not to the size of each
fragment.
Defines the expected traffic rate (bytes per second), i.e., the allowed
bandwidth for the specified protocol. In addition to this field, the
'Burst Bytes' field provides additional allowance such that momentary
bursts of data may utilize more than the defined byte rate, without
being interrupted.
For example, if 'Byte Rate' is set to 40000 and 'Burst Bytes' to
50000, then this implies the following: the allowed bandwidth is
40000 bytes/sec with extra allowance of 50000 bytes; if, for example,
the actual traffic rate is 45000 bytes/sec, then this allowance would
be consumed within 10 seconds, after which all traffic exceeding the
allocated 40000 bytes/sec is dropped. If the actual traffic rate then
slowed to 30000 bytes/sec, then the allowance would be replenished
within 5 seconds.
Defines the tolerance of traffic rate limit (number of bytes).
The default is 0.
Defines the firewall action to be performed upon rule match.

"Allow" = (Default) Permits these packets

"Block" = Rejects these packets
(Read-only) Displays the number of packets accepted or rejected by
the rule.
Table 13-2: Configuration Example of Firewall Rules
1
12.194.231.76 12.194.230.7
16 16
0-65535 0-65535
Any Any
Enable Enable
WAN WAN
0 0
0 0
Allow Allow
Mediant 800B Gateway and E-SBC
Description
Firewall Rule
2 3
0.0.0.0
0
0-65535
icmp
Disable
None
40000
50000
Allow
154
4 5
192.0.0.0 0.0.0.0
8 0
0-65535 0-65535
Any Any
Enable Disable
Voice-Lan None
40000 0
50000 0
Allow Block
Document #: LTRT-10620