Adding Default Rules - Nortel BCM 3.7 Manual

822
Configuring IP Firewall Filters for an interface

Adding Default Rules

Caution: If you turn on the Default Rules, you cannot access Unified Manager on this
interface.
1 Click the Default Rule Status tab.
The Default Rule Status screen appears.
2 Click the Status box and click one of the following options:
• Enabled - Pass Outgoing and Block Incoming Except IP Phones
Allows IP telephony registration traffic through, but blocks all other traffic on this
interface.
• Enabled - Pass Outgoing and Block Incoming Including IP Phones
Blocks all traffic on this interface, including IP telephony traffic.
• Disabled - Pass All
The IP Firewall does not check the traffic on this interface. Therefore, all traffic on this
interface, both incoming and outgoing, is passed through.
• Disabled - Park all but incoming NetBIOS
The default is Disabled.
Note: Setting an Incoming Rule that blocks all incoming packets and disabling the
Default Rules is not the same as enabling the Default Rules.
When block all incoming packets and disable the Default Rules, packets that originate
from inside the Firewall are not treated as Stateful. When a response packet is
returned, it will not match the Incoming Rule and will be blocked.
When you enable the Default Rules, packets that originate from inside the Firewall are
treated as Stateful. When a response packet is returned, it will match the existing state
and will be passed.
N0008589 3.3
Note: You must still specify an H.323 rule to allow IP call voice traffic. This
setting only allows the IP telephone to contact the system to register.
Also, Registration must be turned on in the Services, IP Telephony, Nortel IP
Telephone, General page, before the telephone can access the system to register.