Table 3-13: Internal Firewall Parameters - AudioCodes Mediant 600 User Manual

SIP User's Manual
To activate a de-activated rule:
1. In the 'Edit Rule' column, select the de-activated rule that you want to activate.
2. Click the Activate button; the rule is activated.
To de-activate an activated rule:
1. In the 'Edit Rule' column, select the activated rule that you want to de-activate.
2. Click the DeActivate button; the rule is de-activated.
To delete a rule:
1. Select the radio button of the entry you want to activate.
2. Click the Delete Rule button; the rule is deleted.
3. To save the changes to flash memory, refer to ''Saving Configuration'' on page 193.
Parameter
Is Rule Active
Source IP
[AccessList_Source_IP]
Subnet Mask
[AccessList_Net_Mask]
Local Port Range
[AccessList_Start_Port]
[AccessList_End_Port]
Protocol
[AccessList_Protocol]
Packet Size
[AccessList_Packet_Size]
Byte Rate
[AccessList_Byte_Rate]
Burst Bytes
[AccessList_Byte_Burst]
Action Upon Match
[AccessList_Allow_Type]
Version 5.8

Table 3-13: Internal Firewall Parameters

A read-only field indicating whether the rule is active or not.
Note: After device reset, all rules are active.
IP address (or DNS name) of source network, or a specific host.
IP network mask - 255.255.255.255 for a single host or the
appropriate value for the source IP addresses. The IP address of the
sender of the incoming packet is bitwise ANDed with this mask and
then compared to the field 'Source IP'.
The destination UDP/TCP ports (on this device) to which packets are
sent. The valid range is 0 to 65535.
Note: When the protocol type isn't TCP or UDP, the entire range must
be provided.
The protocol type (e.g., UDP, TCP, ICMP, ESP or 'Any'), or the IANA
protocol number (in the range of 0 (Any) to 255).
Note: This field also accepts the abbreviated strings 'SIP' and 'HTTP'.
Specifying these strings implies selection of the TCP or UDP
protocols, and the appropriate port numbers as defined on the device.
Maximum allowed packet size.
The valid range is 0 to 65535.
Note: When filtering fragmented IP packets, this field relates to the
overall (re-assembled) packet size, and not to the size of each
fragment.
Expected traffic rate (bytes per second).
Tolerance of traffic rate limit (number of bytes).
Action upon match (i.e., 'Allow' or 'Block').
91
3. Web-Based Management
Description
September 2009