Motorola V186 - Cell Phone - GSM System Planner Manual page 122

Firewall
The ACE3600 Firewall enables the user to define a variety of firewall protections.
The firewall is configured and activated in the ACE3600 STS site configuration per site,
for all IP ports in the site. The user can specify the list of IP addresses to accept, i.e. the
list of IP addresses allowed to pass through this firewall. If no IP addresses are defined,
then all addresses are allowed.
When the firewall is active, all UDP/ TCP ports will be blocked (e.g. telnet, http) except
the following:
• DHCP port
• DNS port
• MDLC port (UDP 2002)
• NTP port
• MODBUS port (TCP 502)
• Expansion TCP connectivity and data ports (configurable, by default 57001, and
57002)
• Expansion UDP discovery port (57001, not user configurable)
• Timer event (UDP 57003)
The firewall also enables the user to define the maximum length of ICMP Echo (ping)
allowed. A ping packet with a bigger size will be ignored, no response will be sent back.
In a system with I/O expansion, an enabled firewall could potentially block
communication from expansion frames to the main frame. To enable communication
from expansion frames to a main frame with enabled firewall, either:
• Manually enter the IP addresses of the expansion frames and main frame OR
• Make sure that no address ranges are defined in the firewall Address List (default)
and the firewall will allow all IP communication.
118
Communications