Toolpack:Create Sbc Access Rule A: Difference between revisions

Revision as of 18:37, 3 October 2016

Applies to version(s): v2.10

In addition to the default access rules that are included with the SBC, one or more custom rules can be created and their priority in a series of rules can be set. To add a new rule or to change its priority, do the following:

1-Click SBC in the navigation panel.

2-Click Create New Rule.

3-Enter values for the rule.

Click Create

4-Verify that Firewall rules were successfully created message is displayed.

5-To define what the rule will do, click Create New Filter.

6-Enter values for the filter.

Click Create

To change the priority of an access rule, use the arrow icons.

To increase the priority of an access rule, use either the double or single arrow to move the rule up by one position, or to the top of the list.

To decrease the priority of an access rule, use either the double or single arrow to move the rule down by one position, or to the bottom of the list.

Position of sample rule before it is moved

Position of sample rule after it is moved

Firewall Rule Path

/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]

Parameters (text)

/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]
automatic           = true
description         = "Drop all packets reaching this rule when in DOS/DDOS mode"
enabled             = true
firewall_entry_type = "DDOS_PROTECTION"
name                = "DDOS_PROTECTION"
priority            = 4

/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]/filters

Parameters (json) Firewall Rule

{
  "automatic" : true,
  "description" : "Drop all packets reaching this rule when in DOS/DDOS mode",
  "enabled" : true,
  "firewall_entry_type" : "DDOS_PROTECTION",
  "name" : "@[firewall_rule]",
  "priority" : 4,
  "filters" : {
  }
}

Firewall Filter Path

/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]

Parameters (text)

/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]/filters/@[firewall_filter]

custom_protocol             = 0
destination_ip              = "0.0.0.0"
destination_netmask         = "32"
destination_port            = "161"
entry_duration              = "15 minutes"
ip_interface                = ""
maximum_bandwidth           = "0 Bps"
maximum_bandwidth_packets   = "0 pps"
name                        = "@[firewall_filter]"
override_default_thresholds = false
protocol                    = "UDP"
source_ip                   = "0.0.0.0"
source_netmask              = "32"
source_port                 = "0"
temporary_ban_duration      = "5 minutes"

Parameters (json) Firewall Rule

{
  "custom_protocol" : 0,
  "destination_ip" : "0.0.0.0",
  "destination_netmask" : "32",
  "destination_port" : "161",
  "entry_duration" : "15 minutes",
  "ip_interface" : "",
  "maximum_bandwidth" : "0 Bps",
  "maximum_bandwidth_packets" : "0 pps",
  "name" : "@[firewall_filter]",
  "override_default_thresholds" : false,
  "protocol" : "UDP",
  "source_ip" : "0.0.0.0",
  "source_netmask" : "32",
  "source_port" : "0",
  "temporary_ban_duration" : "5 minutes"
}

List of Parameters

SBC Rule

SBC Filter

@@ Line 54: / Line 54: @@
 <div class="mw-collapsible mw-collapsed" data-collapsetext="Northbound Interface" data-expandtext="Northbound Interface" style="width: 400px;">
+'''Firewall Rule'''
 '''Path'''
 <pre>
-/configurations/@[configuration_name]/hardware_units/@[hardware_name]
+/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]
 </pre>
 '''Parameters (text)'''
 <pre>
-/configurations/@[configuration_name]/hardware_units/@[hardware_name]
+/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]
-description              = ""
+automatic           = true
-graceful_upgrade_timeout = 0
+description         = "Drop all packets reaching this rule when in DOS/DDOS mode"
-is_np1_backup            = false
+enabled             = true
-location                 = ""
+firewall_entry_type = "DDOS_PROTECTION"
-name                     = "@[hardware_name]"
+name                = "DDOS_PROTECTION"
-serial_number            = "@[serial_number]"
+priority            = 4
-target_state             = "Enabled"
-tdm_line_type            = "E1_T1_J1"
-type                     = "TDM/IP Gateway"
+/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]/filters
 </pre>
 '''Parameters (json)'''
+Firewall Rule
+<pre>
+{
+  "automatic" : true,
+  "description" : "Drop all packets reaching this rule when in DOS/DDOS mode",
+  "enabled" : true,
+  "firewall_entry_type" : "DDOS_PROTECTION",
+  "name" : "@[firewall_rule]",
+  "priority" : 4,
+  "filters" : {
+  }
+}
+</pre>
+'''Firewall Filter'''
+'''Path'''
+<pre>
+/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]
+</pre>
+'''Parameters (text)'''
 <pre>
+/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]/filters/@[firewall_filter]
+custom_protocol             = 0
+destination_ip              = "0.0.0.0"
+destination_netmask         = "32"
+destination_port            = "161"
+entry_duration              = "15 minutes"
+ip_interface                = ""
+maximum_bandwidth           = "0 Bps"
+maximum_bandwidth_packets   = "0 pps"
+name                        = "@[firewall_filter]"
+override_default_thresholds = false
+protocol                    = "UDP"
+source_ip                   = "0.0.0.0"
+source_netmask              = "32"
+source_port                 = "0"
+temporary_ban_duration      = "5 minutes"</pre>
+'''Parameters (json)'''
+Firewall Rule
+<pre>
+{
+  "custom_protocol" : 0,
+  "destination_ip" : "0.0.0.0",
+  "destination_netmask" : "32",
+  "destination_port" : "161",
+  "entry_duration" : "15 minutes",
+  "ip_interface" : "",
+  "maximum_bandwidth" : "0 Bps",
+  "maximum_bandwidth_packets" : "0 pps",
+  "name" : "@[firewall_filter]",
+  "override_default_thresholds" : false,
+  "protocol" : "UDP",
+  "source_ip" : "0.0.0.0",
+  "source_netmask" : "32",
+  "source_port" : "0",
+  "temporary_ban_duration" : "5 minutes"
+}
 </pre>
 </div>
 ==List of Parameters==