Cabletron Systems CyberSWITCH CSX200 Configuration Manual

Also see for CyberSWITCH HSIM-W6: Setup guide User guide User guide Installation guide

Contents

Configuration with QuickSET36QuickSET Configuration GuideThe following definitions explain the fields in the QuickSET Firewall configuration window:ACL (Access Control List) — The Access Control List number is a number assigned to aspecific list of sequence numbers.Sequence — A number assigned to individual access filters in an access list. As only one IPAccess Control List can be applied to each port, a single list often includes several access controlfilters. Each filter permits or denies access to or from a certain host, subnet, or network. When anaccess control list contains multiple filters, the filters are referenced in order of their sequencenumbers.Source IP — The Source IP field displays the IP address of the source device accorded thepermissions set in the permissions field. To set permissions for a source device, place the cursor inthe Source IP field and type the IP address of the source for which you wish to set permissions.Source Mask — Displays the mask for the Source IP address specified in the Source IP field. Toset the mask for the specified source IP address, place the cursor in the Source Mask field and typethe mask.The default Mask for both the source and destination addresses is 0.0.0.0, which masks the entireaddress, causing all addresses to match the filter. In other words, the default access control listallows all traffic to pass. Entering a mask of 255.255.255.255 causes only packets matching theexact address you have entered to match the filter. For a Class C address, entering a mask of255.255.255.0 causes packets with the same class C subnet as the IP address to match, therebycausing the access control filter to apply to all hosts on this particular subnet.Dest IP — The Dest IP field displays the IP address of the destination device accorded thepermissions set in the permissions field. To set permissions for a certain destination device, placethe cursor in the Dest IP field and type the IP address of the destination for which you wish to setpermissions.Dest Mask — Displays the mask for the Destination IP address specified in the Dest IP field. Toset the mask for the specified destination IP address, place the cursor in the Dest Mask field andtype the mask.Protocol — Use this pull-down list to select the upper layer protocol that you want to apply to theaccess control filter. Each access control filter can apply to traffic for all protocols included in theTCP/IP suite, or just to traffic for a single protocol.Permission — Use this pull-down list to set the permissions for the specified control filter.Options include permit, deny, permit bi-directional, or deny bi-directional. Choosing permit allowsthe specified packets to be forwarded, while choosing deny blocks the specified packets. Choosingpermit bi-directional or deny bi-directional either permits or denies traffic to and from a specifiedsource or destination.