Foundry Networks Switch and Router Installation And Configuration Manual page 1026

Foundry Switch and Router Installation and Configuration Guide
must add all the policies to the group at one time. You cannot edit policy groups later. To change a policy group,
you must delete the group and then add a new group.
Policies within the group are applied in positional order from left to right. Make sure you specify the filters in the
order you want the device to apply them.
Syntax
Use the following CLI commands or Web management interface panels to configure TCP/UDP access policies.
Foundry Product
NetIron Internet
Backbone router,
BigIron, FastIron II,
TurboIron/8
FastIron Workgroup,
FastIron Backbone,
TurboIron, NetIron
ServerIron
Cache Server Redirection Policies
Cache server redirection polices apply only to a ServerIron configured for Transparent Cache Switching (TCS).
You configure the redirection policies to enable TCS.
Actions
A cache server redirection policy either redirects HTTP traffic to a cache server (permits) or sends the traffic to the
Internet (denies).
Scope
You can enable TCS globally or you can enable it locally, on specific ports. If you enable TCS locally, make sure
you enable TCS on the ports that are connected to the Internet. Enable TCS for outbound traffic.
C - 22
Table C.8: TCP/UDP Access Policies
CLI syntax
BigIron(config)# ip access-policy <policy-num>
permit | deny <ip-addr> <ip-mask> | any
<ip-addr> <ip-mask> | any tcp | udp
[<operator> [<tcp/udp-port-num>]] [log]
BigIron(config-if-1/1)# ip access-policy-group in |
out <policy-list>
FastIronII(config) ip policy <policy-num> permit |
deny tcp | udp <tcp/udp-port-num> global | local
FastIronII(config-if-1/1) ip-policy <num>
NetIron(config)# ip access-policy <policy-num>
permit | deny <ip-addr> <ip-mask> | any
<ip-addr> <ip-mask> | any tcp | udp
[<operator> [<tcp/udp-port-num>]] [log]
NetIron(config-if-1)# ip access-policy-group in |
out <policy-list>
FastIron(config)# ip policy <num> priority high |
normal tcp | udp <tcp/udp-port-num> global | local
FastIron(config-if-1)# ip-policy <num>
ServerIron(config)# ip filter <filter-num> permit |
deny <IP-addr> <ip-mask> | any
<IP-addr> <ip-mask> | any [icmp | tcp | udp |
<num>] [<operator>] [<tcp/udp-port-num>]
Web management links
Configure->IP->Access Policy
Configure->IP->Access Policy
Configure->IP->Access Policy
December 2000