Specifications

OmniAccess Reference: AOS-W System Reference
112 Part 031652-00 May 2005
Source/destination aliases contain one or more IP addresses or ranges of IP
addresses. To add a new address or address range, click the Add button.
Three choices are available:
Host – A single IP address. When entering a single IP address, do not fill in the
netmask/range field.
Network – An IP subnet, consisting of a network number and subnet mask.
Range – A range of IP addresses consisting of all sequential addresses
between a lower value and an upper value. Enter the lower value in the “IP
Address” field, and the upper value in the “Network Mask/Range” field. The
maximum number of addresses in the range is 16 – if larger ranges are needed,
please convert the range into a network number with a subnet mask and use
the “Network” option.
The equivalent CLI configuration for the example above is:
netdestination Internal_Network
host 10.14.1.22
network 172.16.0.0 255.255.0.0
range 192.168.1.1 192.168.1.17
Bandwidth Contracts
To configure bandwidth contracts, go to Configuration > Security > Bandwidth
Contracts
.
You can create a bandwidth contract on a VLAN to rate limit only multicast and
broadcast packets. The syntax is:
(config)# interface vlan <x>
(config-subif)# bandwidth-contract <name>
NAT Pools
To create the collection of IP addresses that are assigned to users inside the
firewall, go to Configuration > Security > NAT Pools.