Cisco TelePresence Administrator's Manual page 63

Source Destination
address address
· · ·
< user-configured firewall rules are applied here >
· · ·
Any 224.0.1.41
Any Any
Any <LAN1 address> Any
Any <LAN2 address> Any
Any Any
The built-in rules and the order in which they are applied cannot be modified.
Note that return traffic from outbound connections is always accepted.
User-configured rules
The user-configured rules are typically used to restrict what can access the VCS. You can:
specify the source IP address subnet from which to allow or deny traffic
n
configure well known services such as SSH, HTTP/HTTPS or specify customized rules based on
n
transport protocols and port ranges
configure different rules for the LAN 1 and LAN 2 interfaces (if the Dual Network Interfaces option key is
n
installed), although note that you cannot configure specific destination addresses such as a multicast
address
specify the priority order in which the rules are applied
n
Setting up and activating firewall rules
The Firewall rules configuration
The set of rules shown will initially be a copy of the current active rules. (On a system where no firewall rules
have previously been defined, the list will be empty.) If you have a lot of rules you can use the Filter options
to limit the set of rules displayed. Note that the built-in rules are not shown in this list.
You can then change the set of firewall rules by adding new rules, or by modifying or deleting any existing
rules. Any changes made at this stage to the current active rules are held in a pending state. When you have
completed making all the necessary changes you can activate the new rules, replacing the previous set.
To set up and activate new rules:
1. Go to the Firewall rules configuration
2. Make your changes by adding new rules, or by modifying or deleting any existing rules as required.
New or modified rules are shown as Pending.
l
Deleted rules are shown as Pending delete.
l
3. When you have finished configuring the new set of firewall rules, click Activate firewall rules.
Cisco VCS Administrator Guide (X7.2)
Protocol Port Action Comment
UDP 1718 Allow
UDP 161 Allow
Any Allow
Any Allow
Any Any Deny
page is used to set up and activate a new set of firewall rules.
page (System > Firewall rules >
Network and system settings
Multicast address for H.323 gatekeeper discovery
SNMP traffic
All traffic for the LAN 1 interface
All traffic for the LAN 2 interface (if using Dual
Network Interfaces)
Fallback rule to deny traffic not destined for this VCS
Configuration).
Page 63 of 498