Users Guide

In the CLI
To enable IPreputation / geolocation classification based firewall, execute the following command:
(host)(config) #firewall ip-classification
To view the status of the IP (reputation/geolocation) classification, execute the following command:
(host) (config) #show firewall
To add rules to a geolocation ACL, execute the following command:
(host) (config)#ip access-list geolocation global-geolocation-acl
To add IPreputation rule, execute the following commands:
(host) (config) #ip-reputation deny inbound
(host) (config) #ip-reputation deny outbound
To disable a feature based on the user role, execute the following command:
(host) (config-role) #ip-classification disable
To view a list of IPs that are blocked based on geoloctaion, execute the following command:
(host) #show datapath ip-geolocation
To view the counters for a particular AP, execute the following command:
(host) #show datapath ip-geolocation counters
To view the status of the IPs that are trying to access the system, execute the following command :
(host) #show datapath ip-reputation
To view the IPreputation related options, execute the following commands:
(host) #show datapath ip-reputation ?
counters IP reputation statistics
rtc IP reputation real time cache
(host) #show datapath ip-reputation counters
(host) #show datapath ip-reputation rtc
To view the IPreputation / geolocation information for session, execute the following command :
(host) #show datapath session ip-classification
To view the details of a particular access-list, execute the following command:
(host) #show ip access-list global-geolocation-acl
Creating a Network Service Alias
A network service alias defines a TCP, UDP or IP protocol and a list or range of ports supported by that service.
When you create a network service alias, you can use that alias when specifying the network service for
multiple session ACLs.
In the WebUI
1. Navigate to the Configuration > Advanced Services> Stateful Firewall > Network Services page on
the WebUI.
2. Click Add to create a new alias.
3. Enter a name for the alias in the Service Name field.
4. In the Protocol section, select either TCP or UDP, or select Protocol and enter the IP protocol number of the
protocol for which you want to create an alias.
5. In the Port Type section, specify whether you want to define the port by a contiguous range of ports, or by
a list of non-contiguous port numbers.
Dell Networking W-Series ArubaOS 6.5.x | User Guide Roles and Policies |
376