Table 3-13: Internal Firewall Parameters - AudioCodes Mediant 2000 User Manual


To activate a de-activated rule:
1. In the 'Edit Rule' column, select the de-activated rule that you want to activate.
2. Click the Activate

To de-activate an activated rule:
1. In the 'Edit Rule' column, select the activated rule that you want to de-activate.
2. Click the DeActivate

To delete a rule:
1. Select the radio button of the entry you want to activate.
2. Click the Delete Rule
3. To save the changes to flash memory, refer to ''
Parameter
Is Rule Active
Source IP
[AccessList_Source_IP]
Subnet Mask
[AccessList_Net_Mask]
Local Port Range
[AccessList_Start_Port]
[AccessList_End_Port]
Protocol
[AccessList_Protocol]
Packet Size
[AccessList_Packet_Size]
Byte Rate
[AccessList_Byte_Rate]
Burst Bytes
[AccessList_Byte_Burst]
Action Upon Match
[AccessList_Allow_Type]
SIP User's Manual
button; the rule is activated.
button; the rule is de-activated.
button; the rule is deleted.

Table 3-13: Internal Firewall Parameters

A read-only field indicating whether the rule is active or not.
Note: After device reset, all rules are active.
IP address (or DNS name) of source network, or a specific host.
IP network mask - 255.255.255.255 for a single host or the
appropriate value for the source IP addresses. The IP address of the
sender of the incoming packet is bitwise ANDed with this mask and
then compared to the field 'Source IP'.
The destination UDP/TCP ports (on this device) to which packets are
sent.
The valid range is 0 to 65535.
Note: When the protocol type isn't TCP or UDP, the entire range must
be provided.
The protocol type (e.g., UDP, TCP, ICMP, ESP or 'Any'), or the IANA
protocol number (in the range of 0 (Any) to 255).
Note: This field also accepts the abbreviated strings 'SIP' and 'HTTP'.
Specifying these strings implies selection of the TCP or UDP
protocols, and the appropriate port numbers as defined on the device.
Maximum allowed packet size.
The valid range is 0 to 65535.
Note: When filtering fragmented IP packets, this field relates to the
overall (re-assembled) packet size, and not to the size of each
fragment.
Expected traffic rate (bytes per second).
Tolerance of traffic rate limit (number of bytes).
Action upon match (i.e., 'Allow' or 'Block').
84
Saving Configuration''
Description
Document #: LTRT-68809
Mediant 2000
on page 173 .