Network Firewall Configuration | Cyclades 2.3.0, ACS48 specification

4: Configuring the Web Interface

When a chain is analyzed, the rules of this chain are reviewed one-by-one until the packet matches one rule. If no rule is found, the default action for that chain will be taken.

Network > Firewall Configuration

1.Select Network from the top menu bar, and then select Firewall Configuration from the left menu panel.

The system brings up the Firewall Configuration form. As explained in the last section, this form lists the chains that make up the rules for IP filtering.

AlterPath Console Server User Manual

81

Image 87

Cyclades 2.3.0, ACS48 user manual Network Firewall Configuration

Contents

AlterPath Console Server Page Table of Contents Configuring the Web Interface Supported Browsers and JRE 139 Page Before You Begin Examples Outlines the Safety Considerations forExample Network Access Method Password field Example Naming Conventions To select is the same as to click your mouse Document Symbols Audience ACS Access and Configuration Product Models and Components Figure below shows AlterPath ACS1 through ACS48 ACS Setup Diagram Package Contents Installing the ACS Package Contents ACS4 through ACS48 Package Contents ACS1 Brackets Rack Mounting the ACS Hardware Connectivity Configuration Method Default Configuration ParametersSystem Requirements Pre-Install Checklist Procedures given in Appendix C SupportedBrowsers and JRE Task 1 Install ACS and connect to the network Installation and Configuration Process Initial Configuration Using the ACS Console Port Task 2 Configure network settings Proceed to Task To create new users, see Wizard Mode Access page 4-10 Task 3 Configure via Web WizardTask 4 Test Configuration Task 5 Configure the web interface in Expert Mode Using the Web Interface Using the Web Interface System brings up the Port Selection form Using the Command Line Interface CLI Where Telnet AccessSSH Access Logging onto the Terminal Tsmenu Access Closing the session from tsmenu From TelnetFrom SSH Power Management Security Overview Configuring the Web Interface For more detailed information, see Chapter Logging Configuring the Web Interface Menu Panel Control Buttons Wizard ModeACS Web Interface GUI Elements User Entry Panel or Form Form Tabs Expert ModeOr Form Indicator Top Menu Bar Saving Your Configuration Button FunctionsButton Name Use this button to Configuring the Web Interface Configuring in Wizard Mode Network SettingsSettings Configuring the Web Interface Port Profile Field Name Definition Then go to Security Users and Groups Access Changing a User Password User Name PasswordRepeat Password Adding a User Select Apply Changes Deleting a User Data Buffering Record the time stamp DestinationMode File Size Bytes System Log Menu Selection Use this menu to Configuring in Expert ModeExpert Mode Menu Applications Security Network Ports Administration Applications Connect Form Title Use this form to Applications Power Management Applications Power management Outlets Manager To Edit the Power Up Interval Applications Power Management View IPDUs Info Applications Power Management Users Manager Deleting a User Applications Power Management Configuration Applications Power Management Software Upgrade Configuring the Web Interface Applications Terminal Profile Menu Configuring the Web Interface Network Host Settings Filed Name Field Definition Syslog Servers Network SyslogFacility Number New Syslog Server Network Pcmcia Management Isdn GSM Pcmcia Configuration Dialog Boxes Call Back Access Method ModemLocal IP Remote IP Access Method Isdn Pin Number Access Method GSM Access Method Compact Flash Access Method Ethernet Access Method Wireless LAN Role of IPsec What is VPN Authentication Keys Network VPN Connections Remote Right Authentication ProtocolAuthentication Method Connection Name Local Left Snmp Daemon SettingsBoot Action RSA Key Community To configure Snmp Source If you are using SNMPv3, skip steps 2 and 3 proceed to stepSysContact SysLocation Permission System invokes the New/Modify Snmp v3 Configuration dialog Services Rule Firewall ConfigurationStructure of IP Filtering Chain Network Firewall Configuration Editing a Chain Adding a Chain Editing a Rule Deleting a Chain Inverted TargetSource IP Mask Destination IP Adding a Rule Additional Fields About the Reject Options Section Network Host Table Network Static Routes Metric Route Select Default , Network , or Host Network IPHost IP Go to Select Gateway or Interface Users and Groups Adding Users and Groups to the Access List Changing the User Password All users must be assigned to a groupDeleting a User from a Group From LoginActive Ports Sessions User Virtual Ports PortsPorts Physical Ports Physical Ports To configure the ports Associating an Alias to a Port Ports Physical Ports General Port AliasBaud Rate Kbps Go to Ports Physical Ports General Power Management Access Authentication Type Definition Ports Physical Ports Access NIS NIS Field Name Entry Fields Based on Authentication TypeAuthentication Radius Authentication Ldap or LdapDownLocal Authorized Users/Groups NIS Domain Name NIS Server IP Authentication Type NIS, LocalNIS or NISLocal All ACS onlyAuthentication Type Kerberos, KerberosDownLocal KerberosDownLocal Syslog Server Ports Physical Ports Data BufferingFull Size Bytes Record the timestamp Ports Physical Ports Multi-User Menu Hotkey To configure ACS to allow multiple sessionsSniff Mode Allow Multiple Sessions Ports Physical Ports Power Management Ports Physical Ports Other TCP Keep-alive Interval Ports Virtual Ports First Remote TCP Port No Number of PortsFirst Local Port No First Local TCP Port No Deleting a Slave Ports Ports Status Configuring the Web Interface 112 Administration System Information Administration Administration Notification Notification Alarm forEmail , Pager , or Snmp Trap Smtp Port Alarm TriggerTo/From/Subject/Body Smtp Server IP SMS Port Pager NumberText SMS Server IP 117 Server IP Port DCD Alarm NotificationOID Type Value Trap Number Manual Setting Administration Time / Date NTP Setting Field Name Definition Administration Boot Configuration Server’s IP Address Unit boot fromBoot Type Boot File Name To save configuration to a FTP server Administration Backup Configuration Backup and Restore Procedure Click on Apply Changes To Save Configuration to a Storage DeviceDefault Configuration Replace Configuration Click on Upgrade Now Administration Upgrade Firmware Administration Reboot Configuring the Web Interface 128 Hardware Specifications Supported Pcmcia Cards MK5002MPL 5GB Appendix a Hardware Specifications 132 Safety Guidelines for Rack-Mounting the ACS Reliable Earthing Safety Precautions for Operating the ACS Working inside the AlterPath Console Port Server Canadian DOC Notice Replacing the BatteryWarnung FCC Warning Statement Aviso de Precaución S-Mark Argentina Batería Trabajar dentro del AlterPath Console Server Requirements From Windows Internet Explorer Installing JRESupported Web Browsers Tested Environment From Windows Netscape or Mozilla Break Signal AuthenticationBios Boot Dhcp CAS Commands Domain Name Server. The computer you use to accessSequence of special characters that sends a command to a An escape sequence is commonly used when the computer Icmp Kerberos IP packet filteringIPsec Isdn Network Mask MACMasquerading MTU NFS NTPObject Identifiers OID Parity OIDSee Object Identifier Packet Pcmcia PortPPP Risc Radius Snmp Smtp TACACS+ Terminal Access Controller Access Control SystemStty Tacacs UDP TelnetTerminal Server TTY Watchdog timer can be programmed to perform a warm Watchdog timer WDT is a device or electronic card thatSystem does not recover on its own Common problem is for a machine or operating system to