To Add a Firewall Filter | Carrier Access CMG Router manual

Profile Directory:Remote Profile

Firewall Filters

To Add a Firewall Filter:

WARNING! THE ADDITION OF THE FIRST FIREWALL RULE WILL AUTOMATICALLY SECURE THE UNIT AGAINST ACCESS VIA TELNET (UNLESS THE FIRST RULE EXPRESSLY PERMITS TELNET). TO ENSURE THE ABILITY TO TELNET INTO THE UNIT BY AT LEAST ONE REMOTE DEVICE, YOU MUST CREATE A RULE INDICATING WHICH DEVICE HAS TELNET ACCESS.

1.On the Main Menu, press [TAB] until Configuration <Profile Directory> is highlighted, and press [ENTER].

2.Select WAN <Setup ->on the RemoteUnit line and press [ENTER].

Profile

Directory

Window

5-28	CMG Router - Release 2.7

Image 160

Carrier Access CMG Router user manual To Add a Firewall Filter

Contents

CMG Router Supporting Software Version Warranty Warranty Procedure Preface Limitation of Warranty & Limitation of Remedies Warranty Product Returns Vii Viii CMG Router Release Table of Contents Management Window Profile DirectoryRouter Card Profile Profile DirectoryLocal Profile Profile DirectoryRemote Profile Basic Configuration Verification WindowStatistics Window System Reports Window Exit Window Router ConfigurationUser Events Protocol Types TroubleshootingGlossary Index Chapter Installation Install a Router CardInstall Country Specific Ringer Tones Overview Maneuvering in the System Fields Scroll FieldSelect Field Edit Field Help Bar Connecting to the Router Establish a Telnet Session Set a New Password Introduction Management Window Management Overview System Time/Login Level Config allows the user to view and change all screens Users, as well as change all three passwordsSystem Date and Time Level Auto-Logout Timer View PasswordConfig Password Admin Password Enhanced Security When Telneting into the Router the following will appear Upload/Download To Setup the Router for Uploads/Downloads Management Window Upload/Download Setup Menu Fields Reboot After Load Code Config Upload/Download Load Defaults Software Images Choices Management Window Profile DirectoryRouter Card Profile Configuration Main Menu Select Router Card Setup and select Enter RIP Mode Send RIP Mode ReceiveSelection is RIP1, RIP2, or RIP1/RIP2 Trunk WAN Link # WAN Trunk Setup Menu FieldsWAN Connection WAN Connection Type Multilink GroupData Speed Voice BW Limit % Select Security Configure and select Enter Security Security Setup Menu Fields Authentication by RemoteProtocol CHAP, PAP or None User ID Authentication of Remote PasswordLocal Security Server Type Snmp Snmp Setup Menu Fields SYS NameSYS Contact SYS Location Access Snmp Trap Destinations Location Select DNS Proxy Configure and select Enter DNS Proxy DNS Proxy Setup Menu Fields Domain NameDNS Server Site Select Spanning Tree Protocol Configure and select Enter Spanning Tree Protocol Bridge Forward Delay Bridge Hello TimeBridge Max Age Bridge Priority Select Network Time Protocol Configure and select Enter Network Time Protocol SPACEBAR, select Enter Network Time Protocol Setup Menu Fields SysLog SysLog Setup Menu Fields Sys LogFacility Level Select DNS Resolver Configure and select Enter DNS Resolver DNS Resolver Cache Contents DNS ResolverMy Domain Name My Node Name Static Host List View or Modify Quality of Service Select Quality of Service Configure and select Enter Quality of Service Menu Fields Routed Voice Priority TOS Mgcp Mgcp Setup Menu Fields Mgcp Interoperability Settings Mgcp Interoperability Menu Fields Mgcp Keep-Alive Timeout Mgcp Type of ServiceQuarantine Notification Handling Quarantine Event Handling Voice Algorithm Names Voice Algorithm Name Fields Algorithm IDAlgorithm Definition Algorithm Alias VoIP VoIP Setup Fields Call Detail Record Voice Algorithm Settings T38 Fax Voice Algorithm Settings VoIP Algorithm Fields Select Voice Channels Configure and select Enter Voice Channels VoIP Setup Fields Profile DirectoryRouter Card Profile Signaling Type RFC2833 Options Signals Payload TypeRepeat Count Repeat Interval Select Dial Plan Configure and select Enter Dial Plan Short Inter Digit Dial Plan Menu FieldsLong Inter Digit Profile DirectoryLocal Profile Main Menu Profile Directory window Local Profile window LAN Local Profile Setup To Setup a Local Profile Local Profile Setup Menu Fields Profile Setup for LocalUnitLAN Network Updates Protocol LAN IP Address Default RouterSubnet Mask Setup Static Networks Profile DirectoryLocal Profile Select Configuration Profile Directory from the Main menu, To Setup Static NetworksSelect LAN Setup and Enter Static Networks Fields Network Metric HopsTicks Next Gateway Static Addresses Static MAC Address Setup Setup Static Static Addresses FieldsDevice Name MAC Address Filters To Define and Enable FiltersSelect Define Filter Custom Select LAN Setup -and select Enter Forward Mode Filters FieldsDefine Filter Filter Type Source/Destination Filter Name Defining Custom Filters Select Define Filter Custom and Enter Defining Protocol Filters Defining Address Filters Advertise Network/Server Advertise Network Server Window Advertise Network/Server Fields SetupSelected Items IPX Server Advertising Type Advertise Network/Server IPX Server FieldsName Dhcp Server/Client/Relay Dhcp Dhcp Mode Server Domain NameStart IP Address Number NetBIOS over TCP/IP Lease DurationDomain Name Servers Option Type Value Dhcp Mode Relay Forward DHCP/TOOTP Requests to Dhcp Mode Client Automatic DNSSet Tx Packets Broadcast Bit Request LAN Collision Threshold Collision Threshold Provisioning LAN Collision Threshold Fields To Configure Spanning Tree Spanning Tree Select Setup Spanning Tree and select Enter Port Priority Spanning Tree FieldsPort Cost Secondary IP Address To Add a Secondary IP Address Secondary IP Address Fields Link Speed To Set the Link Speed Link Speed Fields Profile DirectoryLocal Profile Profile DirectoryRemote Profile LocalUnit LAN Setup Profile DirectoryRemote Profile Remote Profile window Remote WAN Profile Profile Setup for RemoteUnit Mode Transmission OptionsProtocol Route Blocked Bridge Optimize WAN Network Updates GRE Tunnel Enabled with GRE Tunnel By Network Enabled with GRE Tunnel DisabledNAT Gateway Enabled with GRE Tunnel All Tunnel NameRemote IP Tunnel Address Encryption Algorithm Default Router Numbered Setup bottom of the Remote main window Security/Options Following Security/Options setup window will display Security/Options Fields Security ServerCompression Typical Data Static/VPN Networks Profile DirectoryRemote Profile Select WAN Setup -on the RemoteUnit line and press Enter VPN Features Static/VPN Networks FieldsGRE Tunnel Encrypt Tunnel data ? Encryption Algorithm not supported in this release Static NAT Addresses Local IP Address NAT IP Address NAT Bypass Subnets Press Ctrl a to add a NAT Bypass Static Addresses Static Addresses Window MAC Address Static Addresses Window IP Address Symbol Description Firewall Filters To Add a Firewall Filter Select Ctrl a to add an IP Firewall Rule Rule Number Firewall Filters FieldsAction Pass/Drop Service Establishment ServiceName Description Local IP Address/Network Remote IP Address/NetworkPackets which match this rule Significant Bits Filter Network/Server Filter Network /Server Filter Network/Server Fields Selected Items Filter/Learn Network Filter Learn To Configure Spanning Tree Select Setup Spanning Tree and select Enter Port Priority Trunk Port ML QOS Interleaving WAN Connection Type PPP in Frame Relay, or Frame RelayML Fragment Threshold Basic Configuration Start Basic Configuration Select Yes to enter the setup program and select Enter Router Identification Fields Directions for LAN Network Updates RIP mode to be received from remotesRIP mode to send to remotes Protocol remotes will use to authenticate local LocalUnit Protocol LocalUnit will use to authenticate all remotes Authentication User IDChange the PAP Secret LocalUnit will send? WAN Interface Connections Port Number For Frame Relay, Set Option for PVC Management Link Quality Monitoring SensitivitySet Poll Interval Set Poll Counter Profile Name Remote Adit ProfileOther Select WAN Port Number Subnet MaskConnection WAN Connection Type Snmp Communities Snmp ConfigurationStatistics Averaging Interval Setup Complete Verification Window Ping Utility Access Port LAN Port Tests FieldsDst Host Src IP Address Single Ping Response Window FieldsContinuous Ping Result or Last Result Timeout CountResponse Count Trace Route Trace Route Utility Start Tracert DstHostSrc Port SrcIP Port Timeout MethodSize IP Tos Port Monitor Port Name Start MonitorTrap On Number of bytes to display for each packet Verification Window Verification Window Statistics Window Run-Time Auto-Update Run-Time FieldsClear Totals Press ENTER. The Run-time Statistics window will display Errors LAN Packet TotalsWAN Packet Totals Received Remote’s Name Forwarded to WANThroughput to/from WAN Comp. Ratio to/from WAN VoIP Channel View VoIP Channel View Fields SlotCall Agent Endpoint Prefix Rsip Status Field Value Meaning Type Meaning Priority Queue Priority Queue Fields Clear AllPriority Fields Priority Traffic Type Statistics Window System Reports Window Events To View the Event Log Events Fields TimeMessage Count Alarms Alarms Fields Networks/Servers Networks/Servers Fields DisplayLearned From Press ENTER. The Networks/Servers listing will display Frame Type Address Tables Address Tables Fields Flush Learned Entries Displays the information, listing by Port System Reports Window Exit Window Logout Reinitialize 10-4 Router Configuration Basic Setup Command Description Basic VoIP Setup Overview Set the controller to use CLI commands Command Description Fax and Modem Setup Following will configure the Fax and Modem CMG Router Release 11-7 Select Voip Configure -and select Enter Tab to Voice Algorithm Settings and select Enter 11-10 CMG Router Release 11-11 Card Maximum # of Channels configured for T.38 Reserved CMG Router Release 11-13 PPP Internet Connection and Public IP Address Routing Router in Slot CMG Router Release 11-15 Back-to-Back with PPP Boulder Router in Slot Denver Router in Slot Back-to-Back with Multi-Link PPP CMG Router Release 11-19 Back-to-Back with Frame Relay CMG Router Release 11-21 11-22 Appendix a User Events Description Authenticate Events Triggered Events Alarms User Events Appendix B Protocol Number in Firewall Filters Number Keyword Protocol Reference LEAF-2 Tlsp Reference SRP Ethernet Protocol Types HEX AT&T 8047 Protocol Types Protocol Types KTI Appendix C LAN Related Issues Communication Related IssuesExcessive Triggered Update Events on the Events screen LAN Related Issues Unable to access the Local LAN Router unit via Telnet Unable to access a remote unit via Telnet Diagnostics and Performance Tools Verification Ping Utility Statistics Run-Time System Reports Events Identify Alarm State Description Display Alarms Clear Alarm Troubleshooting Algorithm Annex DBandwidth Bit Command Line Challenge Handshake Authorization Protocol ChapBridge Ethernet FirewallFrame Frame relay Host InternetProtocol IP Local Area Network LAN Loopback Media Access Control MAC Mbps Multilink PPP Protocol Point-to-Point Protocol PPP PingQoS Rsip Spanning Tree Protocol Telnet Trace Route Trunk Voice over IP VoIP Index Index CMG Router Release Index Snap RIP IPX Index SYS Index Index