Users Guide

4. Click the IP Version drop-down list and select theIPv4 or IPv6 filter. You need to select one of three
following choices from the Source drop-down list:
n For a specific IPv4 or IPv6 filter, select IP/Mask. Enter the IP address and mask of the IPv4 or IPv6 filter
in the corresponding fields.
n For a IPv4 or IPv6 host, select Any and enter the source address.
5. In the IP Protocol Number or IP Protocol field, enter the number for a protocol or select the protocol
from the drop-down list used by session traffic.
6. In the Starting Ports field, enter a starting port. This is the first port, in the port range, on which permitted
or denied session traffic is running. Port range: 1–65535.
7. In the End Ports field, enter an ending port. This is the last port, in the port range, on which permitted or
denied session traffic is running. Port range: 1–65535.
8. (Optional) Click the White list Bandwidth Contract drop-down list and specify the name of a bandwidth
contract to apply to the session traffic. For further information on creating Bandwidth Contracts, see User
Roles on page 380
9. Click Done. The ACL displays on the white list section.
10.To delete an entry, click Delete next to the entry you want to delete.
11.Click Apply to save changes.
Creating a Bandwidth Contract in the CLI
(host)(config) #cp-bandwidth-contract
Configuring the ACL White List in the CLI
Use the following CLI command to create ACL White Lists.
(host) (config)firewall cp
Override Local Network Destination
This feature provides a scalable solution to create a local net destination override. To implement this feature, a
new sub-command, host vlan – offset under the netdestination configuration command is introduced. An
example and description are as follows:
netdestination store
host vlan 10 offset 5
host vlan 10 offset 8
With the above, select the subnet (for example, 10.1.1.0/24) assigned to vlan 10 for that store and calculate
offsets 5 (10.1.1.5) and 8 (10.1.1.8) from it.
Configure the override local netdestination in the WebUI
1. Navigate to the Configuration > Advanced Services > Stateful Firewall and click Destination tab.
2. Click Add to create a new destination.
a. In the Destination Name field, enter the name of the destination.
b. In the Add rule option, enter the Role Type as Override, the VLAN you want to offset and the VLAN
offset number which is the Netmask/range.
Dell Networking W-Series ArubaOS 6.5.x | User Guide Roles and Policies |
378