RAD Data comm E1/T1 operation manual To define the Solid Firewall rules

Chapter 4 Configuration FCD-IPMInstallation and Operation Manual

To define the Solid Firewall rules:

1. From the Firewall Setup menu, type 2.

The Firewall Rules menu appears (see Figure 4-10).

2.From the Firewall Rules menu, type A and perform the following: Define a link on which the rule will be applied

Specify the source IP address range by defining the start and end addresses.

Specify the destination IP address range by defining the start and end addresses.

Enable the application used by the rule (user defined, Telnet, Ping, HTTP, FTP, TFTP, POP3, SMTP, SNMP, SNMP Trap, BOOTP/DHCP, DNS Client to Server, or DNS Server to Server).

If you select a user-defined application, you must specify the following parameters:

Protocol type: TCP, UPD or ICMP

Minimum and maximum port value for TCP and UDP protocols, or ICMP message type for ICMP protocol.

3.Press <Esc> and save new firewall rule values.

For example, two LANs are connected to the FCD-IPM 10BaseT ports

(see Figure 4-7). LAN 1 includes company’s Web, mail and FTP servers, which cab be accessed from the outside. Employees’ PCs sitting on LAN 2 must not be reached from the outside, but they must be allowed to access the servers. In order to grant access to LAN 1 and restrict it to LAN 2, you must set up two firewalls:

Firewall 1

Select interface – main link Select direction – inbound Define rule 1 for Web server:

Start and end source IP address – 0.0.0.0 to 255.255.255.255 Start and end destination IP address – 192.111.111.111 Protocol – HTTP.

Define rule 2 for mail server, which is identical to rule 1, except for destination IP addresses (192.111.111.112) and protocol (SMTP).

Define rule 3 for FTP server, which is identical to rule 1, except for destination IP addresses (192.111.111.113) and protocol (FTP).

Firewall 2

Select interface – LAN 2

Select direction – outbound.

4-16 Security Setup Menu