AudioCodes Mediant 800 User Manual page 183

CHAPTER 14 Security
Parameter
'Packet Size'
packet-
size
[AccessList_
Packet_Size]
'Byte Rate'
byte-rate
[AccessList_
Byte_Rate]
'Burst Bytes'
byte-burst
[AccessList_
Byte_Burst]
Statistics
'Match Count'
[AccessList_
MatchCount]
The table below provides an example of configured firewall rules:
Parameter
'Source IP'
'Prefix Length'
'Start Port and
End Port'
'Protocol'
'Use Specific
Interface'
'Interface Name'
'Byte Rate'
'Burst Bytes'
Defines the maximum allowed packet size.
The valid range is 0 to 65535.
Note: When filtering fragmented IP packets, this field relates to the overall
(re-assembled) packet size, and not to the size of each fragment.
Defines the expected traffic rate (bytes per second), i.e., the allowed
bandwidth for the specified protocol. In addition to this field, the 'Burst Bytes'
field provides additional allowance such that momentary bursts of data may
utilize more than the defined byte rate, without being interrupted.
For example, if 'Byte Rate' is set to 40000 and 'Burst Bytes' to 50000, then
this implies the following: the allowed bandwidth is 40000 bytes/sec with
extra allowance of 50000 bytes; if, for example, the actual traffic rate is 45000
bytes/sec, then this allowance would be consumed within 10 seconds, after
which all traffic exceeding the allocated 40000 bytes/sec is dropped. If the
actual traffic rate then slowed to 30000 bytes/sec, then the allowance would
be replenished within 5 seconds.
Defines the tolerance of traffic rate limit (number of bytes).
The default is 0.
(Read-only) Displays the number of packets accepted or rejected by the rule.
Table 14-3: Configuration Example of Firewall Rules
1
12.194.231.76
16
0-65535
Any
Enable
WAN
0
0
Mediant 800 Gateway & E-SBC | User's Manual
Description
Firewall Rule
2 3
12.194.230.7 0.0.0.0
16 0
0-65535 0-65535
Any icmp
Enable Disable
WAN None
0 40000
0 50000
- 143 -
4 5
192.0.0.0 0.0.0.0
8 0
0-65535 0-65535
Any Any
Enable Disable
Voice-Lan None
40000 0
50000 0