Users Guide

443 | Roles and Policies Dell Networking W-Series ArubaOS 6.4.x| User Guide
7. Click Apply to apply this configuration. The policy is not created until the configuration is applied.
In the CLI
(host)(config) #ip access-list session web-only
Creating a Network Service Alias
A network service alias defines a TCP, UDP or IP protocol and a list or range of ports supported by that service.
When you create a network service alias, you can use that alias when specifying the network service for
multiple session ACLs.
In the WebUI
1. Navigate to the Configuration > Advanced Services> Stateful Firewall > Network Services page on
the WebUI.
2. Click Add to create a new alias.
3. Enter a name for the alias in the Service Name field.
4. In the Protocol section, select either TCP or UDP, or select Protocol and enter the IP protocol number of the
protocol for which you want to create an alias.
5. In the Port Type section, specify whether you want to define the port by a contiguous range of ports, or by
a list of non-contiguous port numbers.
l If you selected Range, enter the starting and ending port numbers in the Starting Port and End Port
fields.
l If you selected list, enter a comma-separated list of port numbers.
6. To limit the service alias to a specific application, click the Application Level Gateway (ALG) drop-down
list and select one of the following service types
l dhcp: Service is DHCP
l dns: Service is DNS
l ftp: Service is FTP
l h323: Service is H323
l noe: Service is Alcatel NOE
l rtsp: Service is RTSP
l sccp: Service is SCCP
l sip: Service is SIP
l sips: Service is Secure SIP
l svp: Service is SVP
l tftp: Service is TFTP
l vocera: Service is VOCERA
7. Click Apply to save your changes.
In the CLI
To define a service alias via the command-line interface, issue the following command:
(host)(config) #netservice <name> <protocol>|tcp|udp {list <port>,<port>}|{<port> [<port>]}
[ALG <service>]