Dell PowerConnect Brocade 300 Fabric OS Administrator's Guide v7.1.0 - Page 222

7 IP Filter policy Traffic type and destination IP The traffic type and destination IP elements allow an IP policy rule to specify filter enforcement for IP forwarding. The INPUT traffic type is the default and restricts rules to manage traffic on IP management interfaces, The FORWARD traffic type allows management of bidirectional traffic between the external management interface and the inband management interface. In this case, the destination IP element should also be specified. Implicit filter rules For every IP Filter policy, the two rules listed in Table 38 are always assumed to be appended implicitly to the end of the policy. This ensures that TCP and UDP traffic to dynamic port ranges is allowed, so that management IP traffic initiated from a switch, such as syslog, radius and ftp, is not affected. TABLE 38 Implicit IP Filter rules Source address Destination port Protocol Action Any 1024-65535 TCP Permit Any 1024-65535 UDP Permit Default policy rules A switch with Fabric OS v6.2.0 or later will have a default IP Filter policy for IPv4 and IPv6. The default IP Filter policy cannot be deleted or changed. When an alternative IP Filter policy is activated, the default IP Filter policy becomes deactivated. Table 39 lists the rules of the default IP Filter policy. TABLE 39 Default IP policy rules Rule number Source address Destination port Protocol Action 1 Any 2 Any 3 Any 4 Any 5 Any 6 Any 7 Any 8 Any 9 Any 10 Any 11 Any 12 Any 22 TCP 23 TCP 897 TCP 898 TCP 111 TCP 80 TCP 443 TCP 161 UDP 111 UDP 123 UDP 600-1023 TCP 600-1023 UDP Permit Permit Permit Permit Permit Permit Permit Permit Permit Permit Permit Permit 222 Fabric OS Administrator's Guide 53-1002745-02