|
|
| (4 intermediate revisions by the same user not shown) |
| Line 26: |
Line 26: |
| <br/><br/> | | <br/><br/> |
|
| |
|
| '''Firewall Rule Filters'''
| |
| To customize the actions of a firewall rule, you can add one or more filters to the rule.
| |
|
| |
|
| |
| 1-To define what the rule will do, click '''Create New Filter'''.
| |
|
| |
| [[Image:Sbc_Rule_2a.png]]
| |
| <br/><br/>
| |
|
| |
| 2-Enter values for the filter.
| |
| *Click '''Create'''
| |
|
| |
| [[Image:Sbc_Rule_3.png]]
| |
| <br/><br/>
| |
|
| |
|
| |
| '''To change the priority of an access rule, use the arrow icons.'''
| |
| *To increase the priority of an access rule, use either the double or single arrow [[Image:Sbc_Rule_6.png]] to move the rule up by one position, or to the top of the list.
| |
|
| |
| *To decrease the priority of an access rule, use either the double or single arrow [[Image:Sbc_Rule_7.png]] to move the rule down by one position, or to the bottom of the list.
| |
|
| |
|
| |
| '''Position of sample rule before it is moved'''
| |
| [[Image:Sbc_Rule_4.png]]
| |
| <br/><br/>
| |
|
| |
| '''Position of sample rule after it is moved'''
| |
| [[Image:Sbc_Rule_5.png]]
| |
| <br/><br/> | | <br/><br/> |
|
| |
|
| <div class="mw-collapsible mw-collapsed" data-collapsetext="Northbound Interface" data-expandtext="Northbound Interface" style="width: 400px;"> | | <div class="mw-collapsible mw-collapsed" data-collapsetext="Northbound Interface" data-expandtext="Northbound Interface" style="width: 400px;"> |
|
| |
|
| '''Firewall Rule'''
| |
|
| |
|
| '''Path''' | | '''Path''' |
| Line 94: |
Line 65: |
| } | | } |
| </pre> | | </pre> |
|
| |
|
| |
| '''Firewall Filter'''
| |
|
| |
| '''Path'''
| |
| <pre>
| |
| /configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]]/filters/@[firewall_filter]
| |
|
| |
| </pre>
| |
|
| |
| '''Parameters (text)'''
| |
| <pre>
| |
| /configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]/filters/@[firewall_filter]
| |
|
| |
| custom_protocol = 0
| |
| destination_ip = "0.0.0.0"
| |
| destination_netmask = "32"
| |
| destination_port = "161"
| |
| entry_duration = "15 minutes"
| |
| ip_interface = ""
| |
| maximum_bandwidth = "0 Bps"
| |
| maximum_bandwidth_packets = "0 pps"
| |
| name = "@[firewall_filter]"
| |
| override_default_thresholds = false
| |
| protocol = "UDP"
| |
| source_ip = "0.0.0.0"
| |
| source_netmask = "32"
| |
| source_port = "0"
| |
| temporary_ban_duration = "5 minutes"</pre>
| |
|
| |
|
| |
| '''Parameters (json)'''
| |
| Firewall Rule
| |
| <pre>
| |
| {
| |
| "custom_protocol" : 0,
| |
| "destination_ip" : "0.0.0.0",
| |
| "destination_netmask" : "32",
| |
| "destination_port" : "161",
| |
| "entry_duration" : "15 minutes",
| |
| "ip_interface" : "",
| |
| "maximum_bandwidth" : "0 Bps",
| |
| "maximum_bandwidth_packets" : "0 pps",
| |
| "name" : "@[firewall_filter]",
| |
| "override_default_thresholds" : false,
| |
| "protocol" : "UDP",
| |
| "source_ip" : "0.0.0.0",
| |
| "source_netmask" : "32",
| |
| "source_port" : "0",
| |
| "temporary_ban_duration" : "5 minutes"
| |
| }
| |
| </pre>
| |
|
| |
| </div> | | </div> |
|
| |
|
| Line 155: |
Line 73: |
| * [[Parameter: SBC Rule Type|Type]] | | * [[Parameter: SBC Rule Type|Type]] |
| * [[Parameter: SBC Rule Description|Description]] | | * [[Parameter: SBC Rule Description|Description]] |
|
| |
| SBC Filter
| |
| * [[Parameter: SBC Filter Name|Name]]
| |
| * [[Parameter: SBC Filter IP Interface|IP Interface]]
| |
| * [[Parameter: SBC Filter Protocol|Protocol]]
| |
| * [[Parameter: SBC Filter Source IP|Source IP]]
| |
| * [[Parameter: SBC Filter Source Netmask|Source Netmask]]
| |
| * [[Parameter: SBC Filter Source Port|Source Port]]
| |
| * [[Parameter: SBC Filter Destination Port|Destination Port]]
| |
| * [[Parameter: SBC Filter Override Default Thresholds|Override Default Thresholds]]
| |
| <br> | | <br> |
Applies to version(s): v2.10
In addition to the default access rules that are included with the SBC, one or more custom rules can be created and their priority in a series of rules can be set. To add a new rule or to change its priority, do the following:
1-Click SBC in the navigation panel.
2-Click Create New Rule.
3-Enter values for the rule.
4-Verify that Firewall rules were successfully created message is displayed.
Path
/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]
Parameters (text)
/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]
automatic = true
description = "Drop all packets reaching this rule when in DOS/DDOS mode"
enabled = true
firewall_entry_type = "DDOS_PROTECTION"
name = "DDOS_PROTECTION"
priority = 4
/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]/filters
Parameters (json)
Firewall Rule
{
"automatic" : true,
"description" : "Drop all packets reaching this rule when in DOS/DDOS mode",
"enabled" : true,
"firewall_entry_type" : "DDOS_PROTECTION",
"name" : "@[firewall_rule]",
"priority" : 4,
"filters" : {
}
}
List of Parameters
SBC Rule
