Target, Source IP, Mask, Inverted | Cyclades ACS48, 2.3.0 manual

4: Configuring the Web Interface

The system brings up the Edit Rule dialog box:

3. Complete the necessary fields as follows:

Field Name	Definition
Target	Indicates the action to be performed to the IP
	packet when it matches the rule. The kernel can be
	configured to ACCEPT, DROP, RETURN, LOG or
	REJECT the packet by sending a message,
	translating the source or the destination IP address/
	port or sending the packet to another user-defined
	chain.

Source IP	The source IP address.

Mask	Source network mask. Required when a network
	should be included in the rule.

Inverted	Select box to invert the target action (i.e., the
	action assigned to the target will be performed to
	all source IPs/Masks except to the one just
	defined).

84	AlterPath Console Server User Manual

Image 90

Cyclades ACS48, 2.3.0 user manual Target, Source IP, Mask, Inverted

Contents

AlterPath Console Server Page Table of Contents Configuring the Web Interface Supported Browsers and JRE 139 Page Before You Begin Password field Outlines the Safety Considerations forExample Network Access Method Examples Naming Conventions Example Document Symbols To select is the same as to click your mouse ACS Access and Configuration Audience Product Models and Components Figure below shows AlterPath ACS1 through ACS48 ACS Setup Diagram Installing the ACS Package Contents Package Contents ACS4 through ACS48 Package Contents ACS1 Rack Mounting the ACS Brackets Hardware Connectivity Configuration Method Default Configuration ParametersSystem Requirements Pre-Install Checklist Procedures given in Appendix C SupportedBrowsers and JRE Installation and Configuration Process Task 1 Install ACS and connect to the network Task 2 Configure network settings Initial Configuration Using the ACS Console Port Proceed to Task Task 5 Configure the web interface in Expert Mode Task 3 Configure via Web WizardTask 4 Test Configuration To create new users, see Wizard Mode Access page 4-10 Using the Web Interface Using the Web Interface System brings up the Port Selection form Using the Command Line Interface CLI Logging onto the Terminal Telnet AccessSSH Access Where Tsmenu Access Closing the session from tsmenu From TelnetFrom SSH Power Management Security Configuring the Web Interface Overview Logging For more detailed information, see Chapter Configuring the Web Interface User Entry Panel or Form Wizard ModeACS Web Interface GUI Elements Menu Panel Control Buttons Top Menu Bar Expert ModeOr Form Indicator Form Tabs Saving Your Configuration Button FunctionsButton Name Use this button to Configuring the Web Interface Configuring in Wizard Mode Network SettingsSettings Configuring the Web Interface Port Profile Field Name Definition Access Then go to Security Users and Groups Changing a User Password Adding a User PasswordRepeat Password User Name Deleting a User Select Apply Changes Data Buffering File Size Bytes DestinationMode Record the time stamp System Log Applications Configuring in Expert ModeExpert Mode Menu Menu Selection Use this menu to Network Security Administration Ports Applications Connect Applications Power Management Form Title Use this form to Applications Power management Outlets Manager To Edit the Power Up Interval Applications Power Management View IPDUs Info Applications Power Management Users Manager Deleting a User Applications Power Management Configuration Applications Power Management Software Upgrade Configuring the Web Interface Applications Terminal Profile Menu Configuring the Web Interface Network Host Settings Filed Name Field Definition New Syslog Server Network SyslogFacility Number Syslog Servers Network Pcmcia Management Pcmcia Configuration Dialog Boxes Isdn GSM Remote IP Access Method ModemLocal IP Call Back Access Method Isdn Access Method GSM Pin Number Access Method Ethernet Access Method Compact Flash Access Method Wireless LAN What is VPN Role of IPsec Authentication Keys Network VPN Connections Connection Name Authentication ProtocolAuthentication Method Remote Right RSA Key Snmp Daemon SettingsBoot Action Local Left To configure Snmp Community SysLocation If you are using SNMPv3, skip steps 2 and 3 proceed to stepSysContact Source Permission System invokes the New/Modify Snmp v3 Configuration dialog Services Chain Firewall ConfigurationStructure of IP Filtering Rule Network Firewall Configuration Adding a Chain Editing a Chain Deleting a Chain Editing a Rule Mask TargetSource IP Inverted Destination IP Additional Fields Adding a Rule About the Reject Options Section Network Host Table Network Static Routes Go to Select Gateway or Interface Route Select Default , Network , or Host Network IPHost IP Metric Users and Groups Adding Users and Groups to the Access List Changing the User Password All users must be assigned to a groupDeleting a User from a Group User LoginActive Ports Sessions From Physical Ports PortsPorts Physical Ports Virtual Ports To configure the ports Associating an Alias to a Port Ports Physical Ports General Port AliasBaud Rate Kbps Power Management Access Go to Ports Physical Ports General Ports Physical Ports Access Authentication Type Definition NIS NIS Authentication Ldap or LdapDownLocal Entry Fields Based on Authentication TypeAuthentication Radius Field Name KerberosDownLocal Authentication Type NIS, LocalNIS or NISLocal All ACS onlyAuthentication Type Kerberos, KerberosDownLocal Authorized Users/Groups NIS Domain Name NIS Server IP Record the timestamp Ports Physical Ports Data BufferingFull Size Bytes Syslog Server Ports Physical Ports Multi-User Allow Multiple Sessions To configure ACS to allow multiple sessionsSniff Mode Menu Hotkey Ports Physical Ports Power Management Ports Physical Ports Other Ports Virtual Ports TCP Keep-alive Interval First Local TCP Port No Number of PortsFirst Local Port No First Remote TCP Port No Ports Ports Status Deleting a Slave Configuring the Web Interface 112 Administration Administration System Information Administration Notification Notification Alarm forEmail , Pager , or Snmp Trap Smtp Server IP Alarm TriggerTo/From/Subject/Body Smtp Port SMS Server IP Pager NumberText SMS Port 117 Trap Number Port DCD Alarm NotificationOID Type Value Server IP Administration Time / Date Manual Setting NTP Setting Administration Boot Configuration Field Name Definition Boot File Name Unit boot fromBoot Type Server’s IP Address Administration Backup Configuration To save configuration to a FTP server Backup and Restore Procedure Replace Configuration To Save Configuration to a Storage DeviceDefault Configuration Click on Apply Changes Administration Upgrade Firmware Click on Upgrade Now Administration Reboot Configuring the Web Interface 128 Hardware Specifications Supported Pcmcia Cards MK5002MPL 5GB Appendix a Hardware Specifications 132 Safety Guidelines for Rack-Mounting the ACS Safety Precautions for Operating the ACS Reliable Earthing Working inside the AlterPath Console Port Server FCC Warning Statement Replacing the BatteryWarnung Canadian DOC Notice Aviso de Precaución S-Mark Argentina Trabajar dentro del AlterPath Console Server Batería Tested Environment Installing JRESupported Web Browsers Requirements From Windows Internet Explorer From Windows Netscape or Mozilla Boot AuthenticationBios Break Signal CAS Dhcp An escape sequence is commonly used when the computer Domain Name Server. The computer you use to accessSequence of special characters that sends a command to a Commands Icmp Isdn IP packet filteringIPsec Kerberos MTU MACMasquerading Network Mask NFS NTPObject Identifiers OID Packet OIDSee Object Identifier Parity Pcmcia PortPPP Radius Risc Smtp Snmp Tacacs Terminal Access Controller Access Control SystemStty TACACS+ TTY TelnetTerminal Server UDP Common problem is for a machine or operating system to Watchdog timer WDT is a device or electronic card thatSystem does not recover on its own Watchdog timer can be programmed to perform a warm