Dell 6.2 manual Policies

827| Behavior and Defaults DellPowerConnect W- Series ArubaOS 6.2 | UserGuide
Name Protocol Port(s)
svc-ssh tcp 22
svc-h323-tcp tcp 1720
svc-h323-udp udp 17181719
svc-http-proxy1 tcp 3128
svc-http-proxy2 tcp 8080
svc-http-proxy3 tcp 8888
svc-sips tcp 5061
svc-v6-dhcp udp 546547
svc-v6-icmp icmp 0
any any 0
Policies
The followingare predefined policies.
PredefinedPolicy Description
ip access-list session allowall
any any any permit
An"all ow all" firewall rule that permits all
traffic.
ip access-list session control
user any udp 68 deny
any any svc-icmp permit
any any svc-dns permit
any any svc-papi permit
any any svc-cfgm-tcp permit
any any svc-adp permit
any any svc-tftp permit
any any svc-dhcp permit
any any svc-natt permit
Controlstraffic—Apply to untrusted wired
portsin order to allow Dell APs to boot up.
NOTE:In most cases wired ports should be
made "trusted"when attached to an internal
network.
ip access-list session captiveportal
user alias mswitch svc-https dst-nat 8081
user any svc-http dst-nat 8080
user any svc-https dst-nat 8081
user any svc-http-proxy1 dst-nat 8088
user any svc-http-proxy2 dst-nat 8088
user any svc-http-proxy3 dst-nat 8088
EnablesC aptive Portal authentication.
1. AnyHTTPS traffic destined for the
controller will be NATed to port 8081,
where thecaptive portal server will
answer.
2. All HTTP trafficto any destination will be
NATedto the controller on port 8080,
where an HTTP redirect will be issued.
3. All HTTPS trafficto any destination will be
NATedto the controller on port 8081,
where an HTTP redirect will be issued.
4. All HTTP proxytraffic will be NATed to the
controller on port 8088.
Table40 1: PredefinedPolicies