Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 8: Creating Rules and Rule Groups
Creating IP Filter rules
232
3 In the Source Burb drop-down list, select the burb through which the
Sidewinder G2 should route to get to the source IP address.
4 In the Destination Burb drop-down list, select the burb through which the
Sidewinder G2 should route to get to the destination IP address.
5 In the Source Show drop-down list, select the type of network object or
group to use as the source object.
6 In the displayed Source list, select the source object to use for this rule.
7 In the Destination Show drop-down list, select the type of network object or
group to use as the destination object.
8 In the displayed Destination list, select the destination object to use for this
rule.
9 In the Source Port Range field, specify the port or range of ports (inclusive)
in which connections are allowed to be made to or initiated from the
corresponding address. Note the following:
• Valid values are 1–65535.
• To specify “any port,” leave the field blank.
If configuring an ICMP or Other rule, port configuration is not an option.
10 In the Destination Port Ranges field, do one of the following:
• To specify “any port,” leave the field blank.
• To specify one or more port or port ranges (inclusive) in which
connections are allowed to be made to or initiated from the
corresponding address, click New. Valid values are 1–65535. You also
have the option to modify or delete existing entries.
If configuring an ICMP or Other rule, port configuration is not an option.
11 In the NAT Mode drop-down list, select one of the following options:
• None—This option will disable NAT for this rule.
• Normal—All packets that match this rule will be translated as follows:
the source address will be translated to the associated NAT address,
and the source port will be translated to a port within the NAT port
range.
• Source Port—All packets that match this rule will be translated as
follows: the source address will be translated to the associated NAT
address. The source port will not be translated.
12 In the NAT Address drop-down list, select the object (IP address, host, or
subnet) that will replace the original source address when it is translated.
(To filter the type of objects that appear in the list, select an option from the
Show drop-down list.)
Important: If you selected Source Port NAT in the previous step, you must
specify an alias IP address or a subnet that contains at least one alias IP
address as the NAT Address. If you specify an interface IP address or subnet
that does not contain an alias IP address, this rule will not pass traffic and audit
will be generated.