Radware Alteon Application Manual page 374

Alteon Application Switch Operating System Application Guide
Filtering and Traffic Manipulation
Figure 58: Example VLAN-Based Filtering Configuration
To configuring VLAN-based filtering
This procedure is based on
Note: While this example is based on IP traffic, VLAN-based filtering can also be used for non-IP
traffic by specifying smac and dmac criteria instead of sip and dip.
1. Configure Filter 2 to allow local clients to browse the Web and then assign VLAN 20 to the filter.
The filter must recognize and allow TCP traffic from VLAN 20 to reach the local client destination
IP addresses if originating from any HTTP source port.
>> # /cfg/slb/filt 2
>> Filter 2# sip any
>> Filter 2# dip 205.177.15.0
>> Filter 2# dmask 255.255.255.0
>> Filter 2# proto tcp
>> Filter 2# sport http
>> Filter 2# dport any
>> Filter 2# action allow
374
Figure 58 - Example VLAN-Based Filtering Configuration, page
(Select the menu for Filter 2)
(From any source IP address)
(To base local network destination
address)
(For entire subnet range)
(For TCP protocol traffic)
(From any source HTTP port)
(To any destination port)
(Allow matching traffic to pass)
Document ID: RDWR-ALOS-V2900_AG1302
374.