Radware Alteon Application Manual page 382

Alteon Application Switch Operating System Application Guide
Filtering and Traffic Manipulation
7. Create a filter that allows local clients to telnet anywhere outside the local intranet.
The filter must recognize and allow TCP traffic to reach the local client destination IP addresses if
originating from a Telnet source port:
>> Filter 4# /cfg/slb/filt 5
>> Filter 5# sip any
>> Filter 5# dip 205.177.15.0
>> Filter 5# dmask 255.255.255.0
>> Filter 5# proto tcp
>> Filter 5# sport telnet
>> Filter 5# dport any
>> Filter 5# action allow
>> Filter 5# ena
8. Create a series of filters to allow Domain Name System (DNS) traffic. DNS traffic requires four
filters; one pair is needed for UDP traffic (incoming and outgoing) and another pair for TCP
traffic (incoming and outgoing).
a. For UDP:
>> Filter 5# /cfg/slb/filt 6
>> Filter 6# sip any
>> Filter 6# dip 205.177.15.4
>> Filter 6# dmask 255.255.255.255
>> Filter 6# proto udp
>> Filter 6# sport any
>> Filter 6# dport domain
>> Filter 6# action allow
>> Filter 6# ena
>> Filter 6# /cfg/slb/filt 7
>> Filter 7# sip 205.177.15.4
>> Filter 7# smask 255.255.255.255
>> Filter 7# dip any
>> Filter 7# proto udp
>> Filter 7# sport domain
>> Filter 7# dport any
>> Filter 7# action allow
>> Filter 7# ena
b. Similarly, for TCP:
>> Filter 7# /cfg/slb/filt 8
>> Filter 8# sip any
>> Filter 8# dip 205.177.15.4
382
(Select the menu for Filter 5)
(From any source IP address)
(To base local network destination
address)
(For entire subnet range)
(For TCP protocol traffic)
(From a Telnet port)
(To any destination port)
(Allow matching traffic to pass)
(Enable the filter)
(Select the menu for Filter 6)
(From any source IP address)
(To local DNS Server)
(Set mask for exact destination address)
(For UDP protocol traffic)
(From any source port)
(To any DNS destination port)
(Allow matching traffic to pass)
(Enable the filter)
(Select the menu for Filter 7)
(From local DNS Server)
(Set mask for exact source address)
(To any destination IP address)
(For UDP protocol traffic)
(From a DNS source port)
(To any destination port)
(Allow matching traffic to pass)
(Enable the filter)
(Select the menu for Filter 8)
(From any source IP address)
(To local DNS Server)
Document ID: RDWR-ALOS-V2900_AG1302