User Manual

Chapter 3 - Operation and Administration of the Macro BTS NPU Configuration
4Motion 212 System Manual
Table 3-21: Parameters for Configuring Permit/Deny Rules for TCP/UDP Traffic
Parameter Description Example
Source IP
address
any Indicates that incoming
TCP/UDP traffic from any source
IP address is permitted or
denied.
npu(config-ext-nacl)# permit tcp any
any
npu(config-ext-nacl)# deny udp any
host
<src-ip-addres
s>
Indicates that incoming
TCP/UDP traffic from a specific
source IP address is permitted
or denied.
npu(config-ext-nacl)# permit tcp host
1.1.1.1 any
npu(config-ext-nacl)# deny udp host
1.1.1.1
<network-src-i
p> <mask>
Indicates that incoming
TCP/UDP traffic is to be
permitted or denied for a
particular subnet.
npu(config-ext-nacl)# permit tcp
1.1.1.0 255.255.255.0 any
npu(config-ext-nacl)# deny udp
1.1.1.0 255.255.255.0
Source port [{gt
<port-number
(1-65535)>
Indicates that incoming TCP/
UDP traffic is to be permitted or
denied from the source port for
which the port number is greater
than the value of this parameter.
npu(config-ext-nacl)# permit tcp
1.1.1.0 255.255.255.0 gt 1111
npu(config-ext-nacl)# deny udp host
1.1.1.1 gt 1010
[{lt
<port-number
(1-65535)>
Indicates that incoming TCP/
UDP traffic is to be permitted or
denied from the source port for
which the port number is less
than the value of this parameter.
npu(config-ext-nacl)# permit tcp
1.1.1.0 255.255.255.0 lt 1111
npu(config-ext-nacl)# deny udp host
1.1.1.1 lt 1010
[{eq
<port-number
(1-65535)>
Indicates that incoming TCP/
UDP traffic is to be permitted or
denied from the source port for
which the port number is equal
to the value of this parameter.
npu(config-ext-nacl)# permit tcp
1.1.1.0 255.255.255.0 eq 8080
npu(config-ext-nacl)# deny udp host
1.1.1.1 eq 4040
range
<port-number
(1-65535)>
<port-number
(1-65535)>}]
Indicates that incoming TCP/
UDP traffic is to be permitted or
denied from the source port for
which the port number is within
the range specified by this
parameter.
npu(config-ext-nacl)# permit tcp
1.1.1.0 255.255.255.0 range 1010
8080
npu(config-ext-nacl)# deny udp host
1.1.1.1 range 1010 4040