Toolpack:Create Sbc Access Rule A

From TBwiki
(Difference between revisions)
Jump to: navigation, search
(→Applies to version(s): v2.10)
(→List of Parameters)
 
(6 intermediate revisions by one user not shown)
Line 1: Line 1:
 
=== '''''Applies to version(s): v2.10''''' ===
 
=== '''''Applies to version(s): v2.10''''' ===
  
−
{{DISPLAYTITLE:Enable the Session Border Gateway}}
+
{{DISPLAYTITLE:Create Session Border Gateway Access Rules and Filters}}
  
 
In addition to the default access rules that are included with the SBC, one or more custom rules can be created and their priority in a series of rules can be set. To add a new rule or to change its priority, do the following:
 
In addition to the default access rules that are included with the SBC, one or more custom rules can be created and their priority in a series of rules can be set. To add a new rule or to change its priority, do the following:
Line 26: Line 26:
 
<br/><br/>
 
<br/><br/>
  
−
5-To define what the rule will do, click '''Create New Filter'''.
 
−
 
−
[[Image:Sbc_Rule_2a.png]]
 
 
<br/><br/>
 
<br/><br/>
  
−
6-Enter values for the filter.
+
<div class="mw-collapsible mw-collapsed" data-collapsetext="Northbound Interface" data-expandtext="Northbound Interface" style="width: 400px;">
−
*Click '''Create'''
+
  
−
[[Image:Sbc_Rule_3.png]]
 
−
<br/><br/>
 
−
 
−
 
−
'''To change the priority of an access rule, use the arrow icons.'''
 
−
*To increase the priority of an access rule, use either the double or single arrow [[Image:Sbc_Rule_6.png]] to move the rule up by one position, or to the top of the list.
 
−
 
−
*To decrease the priority of an access rule, use either the double or single arrow [[Image:Sbc_Rule_7.png]] to move the rule down by one position, or to the bottom of the list.
 
−
 
−
 
−
'''Position of sample rule before it is moved'''
 
−
[[Image:Sbc_Rule_4.png]]
 
−
<br/><br/>
 
−
 
−
'''Position of sample rule after it is moved'''
 
−
[[Image:Sbc_Rule_5.png]]
 
−
<br/><br/>
 
−
 
−
<div class="mw-collapsible mw-collapsed" data-collapsetext="Northbound Interface" data-expandtext="Northbound Interface" style="width: 400px;">
 
  
−
'''Firewall Rule'''
 
 
'''Path'''
 
'''Path'''
 
<pre>
 
<pre>
Line 76: Line 52:
 
'''Parameters (json)'''
 
'''Parameters (json)'''
 
Firewall Rule
 
Firewall Rule
 +
 
<pre>
 
<pre>
 
{
 
{
Line 88: Line 65:
 
}
 
}
 
</pre>
 
</pre>
−
 
−
 
−
'''Firewall Filter'''
 
−
'''Path'''
 
−
<pre>
 
−
/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]
 
−
</pre>
 
−
 
−
'''Parameters (text)'''
 
−
<pre>
 
−
/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]/filters/@[firewall_filter]
 
−
 
−
custom_protocol            = 0
 
−
destination_ip              = "0.0.0.0"
 
−
destination_netmask        = "32"
 
−
destination_port            = "161"
 
−
entry_duration              = "15 minutes"
 
−
ip_interface                = ""
 
−
maximum_bandwidth          = "0 Bps"
 
−
maximum_bandwidth_packets  = "0 pps"
 
−
name                        = "@[firewall_filter]"
 
−
override_default_thresholds = false
 
−
protocol                    = "UDP"
 
−
source_ip                  = "0.0.0.0"
 
−
source_netmask              = "32"
 
−
source_port                = "0"
 
−
temporary_ban_duration      = "5 minutes"</pre>
 
−
 
−
 
−
'''Parameters (json)'''
 
−
Firewall Rule
 
−
<pre>
 
−
{
 
−
  "custom_protocol" : 0,
 
−
  "destination_ip" : "0.0.0.0",
 
−
  "destination_netmask" : "32",
 
−
  "destination_port" : "161",
 
−
  "entry_duration" : "15 minutes",
 
−
  "ip_interface" : "",
 
−
  "maximum_bandwidth" : "0 Bps",
 
−
  "maximum_bandwidth_packets" : "0 pps",
 
−
  "name" : "@[firewall_filter]",
 
−
  "override_default_thresholds" : false,
 
−
  "protocol" : "UDP",
 
−
  "source_ip" : "0.0.0.0",
 
−
  "source_netmask" : "32",
 
−
  "source_port" : "0",
 
−
  "temporary_ban_duration" : "5 minutes"
 
−
}
 
−
</pre>
 
−
 
 
</div>
 
</div>
  
Line 147: Line 73:
 
* [[Parameter: SBC Rule Type|Type]]
 
* [[Parameter: SBC Rule Type|Type]]
 
* [[Parameter: SBC Rule Description|Description]]
 
* [[Parameter: SBC Rule Description|Description]]
−
 
−
SBC Filter
 
−
* [[Parameter: SBC Filter Name|Name]]
 
−
* [[Parameter: SBC Filter IP Interface|IP Interface]]
 
−
* [[Parameter: SBC Filter Protocol|Protocol]]
 
−
* [[Parameter: SBC Filter Source IP|Source IP]]
 
−
* [[Parameter: SBC Filter Source Netmask|Source Netmask]]
 
−
* [[Parameter: SBC Filter Source Port|Source Port]]
 
−
* [[Parameter: SBC Filter Destination Port|Destination Port]]
 
−
* [[Parameter: SBC Filter Override Default Thresholds|Override Default Thresholds]]
 
 
<br>
 
<br>

Latest revision as of 13:16, 11 October 2016

Applies to version(s): v2.10

In addition to the default access rules that are included with the SBC, one or more custom rules can be created and their priority in a series of rules can be set. To add a new rule or to change its priority, do the following:

1-Click SBC in the navigation panel.

Sbc Enable 0.png

2-Click Create New Rule.

Sbc Rule 0.png

3-Enter values for the rule.

  • Click Create

Sbc Rule 1.png

4-Verify that Firewall rules were successfully created message is displayed.

Sbc Rule 2.png




Path 

/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]

Parameters (text) 

/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]
automatic           = true
description         = "Drop all packets reaching this rule when in DOS/DDOS mode"
enabled             = true
firewall_entry_type = "DDOS_PROTECTION"
name                = "DDOS_PROTECTION"
priority            = 4

/configurations/@[configuration_name]/firewalls/firewall/rules/@[firewall_rule]/filters


Parameters (json) Firewall Rule 

{
  "automatic" : true,
  "description" : "Drop all packets reaching this rule when in DOS/DDOS mode",
  "enabled" : true,
  "firewall_entry_type" : "DDOS_PROTECTION",
  "name" : "@[firewall_rule]",
  "priority" : 4,
  "filters" : {
  }
}

List of Parameters

SBC Rule


Retrieved from "https://docs.telcobridges.com/mediawiki/index.php?title=Toolpack:Create_Sbc_Access_Rule_A&oldid=22008"
Personal tools