Instruction manual

NetVanta 2000 Series System Manual Section 4, User Interface Guide
61200361L1-1E © 2002 ADTRAN, Inc. 59
Changing the Priority of a Policy
You can change the access policy priority by two ways: You can do simple priority corrections by using the
up (-) and down (¯) buttons, which are located at the end columns of each policy in the access policy table.
Clicking the up or down button increases or decreases the priority of the access policy with respect to its
neighboring policies.
Alternative way can be used for major priority corrections. Select the policy whose priority you want to
change by entering its Rule ID in the text box located after
P
LACE
R
ULE
tab. This is located at the end of
the policy table.
Then use the
B
EFORE
/A
FTER
radio button in combination with Rule ID text box following this radio button
to decide the new place in the table for this policy, and click the
I
NSERT
button.
The policy will be moved to the new place in the table.
Default Access Policies
By default, the NetVanta 2000 series has eight corporate outbound policies configured for accessing
popular Internet services from corporate network. With these default access policies any host in the
corporate network can access the specified services on any host in the Internet. You can modify these
policies to suite your network access policy.
> POLICIES > ACCESS POLICIES: TO DMZ
The To DMZ Policy Configuration page is displayed by clicking A
CCESS
P
OLICIES
: T
O
DMZ in the menu list on
the left side of the display window. To DMZ Inbound policies apply to all data received by the NetVanta 2000
series that is to be transmitted out the DMZ Interface.
The To DMZ Policy Configuration page displays a list of all current policies and provides an easy way to
organize them using the
R
ULE
ID field.
Before creating a new To DMZ inbound policy decide the appropriate priority for the policy. All policies
are displayed in descending order according to priority. Using the
A
DD
drop down menu containing
BEFORE, AFTER, BEGINNING, and END options, configure the placement of the policy and click the
A
DD
button. The Internet Access Policy Configuration page is displayed. A discussion of the fields found
on the Internet Access Policy Configuration page follows.
> POLICIES > ACCESS POLICIES: TO DMZ > CONFIGURATION > RULE ID
The R
ULE
ID number is a system-wide unique policy ID generated by the NetVanta 2000 series when a new
access policy is created.
Default access policies have NAT enabled.