Radware Alteon Application Manual page 394

Alteon Application Switch Operating System Application Guide
Filtering and Traffic Manipulation
>> Filter 16# dmask 255.255.255.0
>> Filter 16# dport any
>> Filter 16# action allow
>> Filter 16# ena
>> Filter 16# adv/tcp
>> Filter 16 Advanced# ack ena
>> Filter 16 Advanced# psh ena
4. Configure a filter that allows trusted HTTP traffic from the Internet to pass through Alteon to the
Web servers.
>> Filter 16 Advanced# /cfg/slb/filt 17
>> Filter 17# sip any
>> Filter 17# sport http
>> Filter 17# proto tcp
>> Filter 17# dip 203.122.186.0
>> Filter 17# dmask 255.255.255.0
>> Filter 17# dport http
>> Filter 17# action allow
>> Filter 17# ena
5. Configure a filter that allows HTTP responses from the Web servers to pass through Alteon to the
Internet.
>> Filter 17# /cfg/slb/filt 18
>> Filter 18# sip 203.122.186.0
>> Filter 18# smask 255.255.255.0
>> Filter 18# sport http
>> Filter 18# proto tcp
>> Filter 18# dip any
>> Filter 18# dport http
>> Filter 18# action allow
>> Filter 18# ena
6. Configure a default filter which denies all other traffic. This filter is required.
>> Filter 18# /cfg/slb/filt 2048
>> Filter 2048# sip any
>> Filter 2048# dip any
>> Filter 2048# action deny
>> Filter 2048# name deny matching traffic
>> Filter 2048# ena
394
(To the entire subnet range)
(To any destination port)
(Allow matching traffic to pass)
(Enable the filter)
(Select the advanced TCP menu)
(Match acknowledgments only)
(Match acknowledgments only)
(Select a filter for incoming HTTP traffic)
(From any source IP address)
(From well-known source HTTP port)
(For TCP traffic)
(To the Web servers' IP address)
(To the entire subnet range)
(To well-known destination HTTP port)
(Allow matching traffic to pass)
(Enable the filter)
(Select a filter for outgoing HTTP traffic)
(From the Web servers' source IP
address)
(From the entire subnet range)
(From well-known source HTTP port)
(For TCP traffic)
(To any destination IP address)
(To well-known destination HTTP port)
(Allow matching traffic to pass)
(Enable the filter)
(Select a default filter)
(From any source IP address)
(To any destination IP address)
(Block matching traffic)
(Provide a descriptive name for the filter)
(Enable the filter)
Document ID: RDWR-ALOS-V2900_AG1302