Dell 6.2 Server User Manual


 
any any svc-http permit
any any svc-https permit
Creating a Network Service Alias
A network service alias defines a TCP, UDP or IP protocol and a list or range of ports supported by that service.
When you create a network service alias, you can use that alias when specifying the network service for multiple
session ACLs.
In the WebUI
1. Navigate to the Configuration > Advanced Services> Stateful Firewall > Network Services page on the
WebUI.
2. Click Add to create a new alias.
3. Enter a name for the alias in the Service Name field.
4. In the Protocol section, select either TCP or UDP, or select Protocol and enter the IP protocol number of the
protocol for which you want to create an alias.
5. In the Port Type section, specify whether you want to define the port by a contiguous range of ports, or by a list
of non-contiguous port numbers.
l If you selected Range, enter the starting and ending port numbers in the Starting Port and End Port fields.
l If you selected list, enter a comma-separated list of port numbers.
6. To limit the service alias to a specific application, click the Application Level Gateway (ALG) drop-down list
and select one of the following service types
l dhcp: Service is DHCP
l dns: Service is DNS
l ftp: Service is FTP
l h323: Service is H323
l noe: Service is Alcatel NOE
l rtsp:Service is RTSP
l sccp: Service is SCCP
l sip: Service is SIP
l sips: Service is Secure SIP
l svp: Service is SVP
l tftp: Service is TFTP
l vocera: Service is VOCERA
7. Click Apply to save your changes.
In the CLI
To define a service alias via the command-line interface, access the CLI in config mode and issue the following
command:
(host)(config) #netservice <name> <protocol>|tcp|udp {list <port>,<port>}|{<port> [<port>]}
[ALG <service>]
Creating an ACL White List
The ACL White List consists of rules that explicitly permit or deny session traffic from being forwarded to or
blocked from the controller. The white list protects the controller during traffic session processing by prohibiting
DellPowerConnectW-SeriesArubaOS6.2 | User Guide Rolesand Policies | 300