User Manual

Chapter 3 - Operation and Administration of the Macro BTS NPU Configuration
4Motion 213 System Manual
Destination
IP address
any Indicates that TCP/UDP traffic to
all NPU interface IP addresses is
permitted or denied.
npu(config-ext-nacl)# permit tcp
1.1.1.1 host any
npu(config-ext-nacl)# deny udp any
any
host
<src-ip-addres
s>
Indicates that TCP/UDP traffic to
a specific NPU interface IP
address is permitted or denied.
npu(config-ext-nacl)# permit tcp any
host 1.1.1.1 host host 1.1.1.1
npu(config-ext-nacl)# deny udp any
host 1.1.1.1
<network-src-i
p> <mask>
Indicates that TCP/UDP traffic is
to be permitted or denied for a
particular NPU interface subnet.
npu(config-ext-nacl)# permit tcp any
host 1.1.1.0 255.255.255.0
npu(config-ext-nacl)# deny udp any
host 1.1.1.0 255.255.255.0
Destination
port
[{gt
<port-number
(1-65535)>
Indicates that TCP/ UDPtraffic is
to be permitted or denied to the
NPU interface source port for
which the port number is greater
than the value of this parameter.
npu(config-ext-nacl)# permit tcp host
1.1.1.1 host any gt 8080
npu(config-ext-nacl)# deny udp any
any
[{lt
<port-number
(1-65535)>
Indicates that TCP/ UDP traffic is
to be permitted or denied to the
NPU interface source port for
which the port number is less
than the value of this parameter.
npu(config-ext-nacl)# permit tcp host
1.1.1.0 255.255.255.0 any lt 1111
npu(config-ext-nacl)# deny udp any
host 1.1.1.1 lt 1010
[{eq
<port-number
(1-65535)>
Indicates that TCP/ UDP traffic is
to be permitted or denied to the
NPU interface source port for
which the port number is equal
to the value of this parameter.
npu(config-ext-nacl)# permit tcp any
1.1.1.0 255.255.255.0 eq 8080
npu(config-ext-nacl)# deny udp any
host 1.1.1.1 eq 4040
range
<port-number
(1-65535)>
<port-number
(1-65535)>}]
Indicates that TCP/ UDP traffic is
to be permitted or denied the
NPU interface source port for
which the port number is within
the range specified by this
parameter.
npu(config-ext-nacl)# permit tcp host
1.1.1.1 host 1.1.1.0 255.255.255.0
range 1010 8080
npu(config-ext-nacl)# deny udp host
1.1.1.1 any range 1010 4040
Table 3-21: Parameters for Configuring Permit/Deny Rules for TCP/UDP Traffic
Parameter Description Example