Avocent Network Adapter EMS1000P Guía de usuario descargar pdf (Pagina 34)

To edit a host:

1. Select Network - Hosts.

2. Click on the IP address of the hostname you want to edit.

3. Enter a new hostname and alias, if applicable, then click Save.

Firewall

Administrators can configure the console server to act as a firewall. By default, three built-in chains accept all

INPUT, FORWARD and OUTPUT packets. Select the Add, Delete or Change Policy buttons to add a user chain,

delete user-added chains and to change the built-in chains policy. Default chains can have their policy changed

(Change Policy) to accept or drop, but cannot be deleted. Clicking on the Chain Name allows you to configure

rules for chains.

Firewall configuration is available by clicking on Network - Firewall. Separate but identical configuration

screens are available from either the IPv4 Filter Table or IPv6 Filter Table menu options.

Only the policy can be edited for a default chain; default chain policy options are ACCEPT and DROP.

When a chain is added, only a named entry for the chain is created. One or more rules must be configured for a

chain after it is added.

Configuring the firewall

For each rule, an action (either ACCEPT, DROP, RETURN, LOG or REJECT ) must be selected from the Target

pull-down menu. The selected action is performed on an IP packet that matches all the criteria specified in the

rule.

If LOG is selected from the Target pull-down menu, the administrator can configure a Log Level, a Log Prefix

and whether the TCP sequence, TCP options and IP options are logged in the Log Options Section.

If REJECT is selected from the Target pull-down menu, the administrator can select an option from the Reject

with pull-down menu; the packet is dropped and a reply packet of the selected type is sent.

Protocol options

Different fields are activated for each option in the Protocol pull-down menu.

If Numeric is selected from the Protocol menu, enter a Protocol Number in the text field.

If TCP is selected from the Protocol menu, a TCP Options Section is activated for entering source and destination

ports and TCP flags.

If UDP is selected from the Protocol menu, the UDP section is activated for entering source and destination

ports.

Field/Menu

Option

Definition

Source Port - or -

Destination Port

A single IP address or a range of IP addresses.

TCP Flags

[TCP only] SYN (synchronize), ACK (acknowledge), FIN (finish), RST (reset), URG (urgent) and

PSH (push). The conditions in the pull-down menu for each flag are: Any, Set or Unset.

Table 3.3: Firewall Configuration - TCP and UDP Options Fields

If ICMP is selected from the Protocol menu, the ICMP Type pull-down menu is activated.

26 Cyclades™ ACS 6000 Advanced Console Server

1 2 ... 29 30 31 32 33 34 35 36 37 38 39 ... 79 80

Sin comentarios

Avocent Network Adapter EMS1000P Guía de usuario Pagina 34