HP 8/80 Fabric OS Administrator's Guide v6.4.0 (53-1001763-01, June 2010) - Page 196

7 IP Filter policy TABLE 32 Supported services (Continued) Service name Port number snmp 161 ssh 22 sunrpc 111 telnet 23 www 80 TCP and UDP protocols are valid selections. Fabric OS v6.2.0 and later does not support configuration to filter other protocols. Implicitly, ICMP type 0 and type 8 packets are always allowed to support ICMP echo request and reply on commands like ping and traceroute. For the action, only "permit" and "deny" are valid. For every IP Filter policy, the two rules listed in Table 33 are always assumed to be appended implicitly to the end of the policy. This ensures that TCP and UDP traffic to dynamic port ranges is allowed, so that management IP traffic initiated from a switch, such as syslog, radius and ftp, is not affected. TABLE 33 Implicit IP Filter rules Source address Destination port Protocol Action Any 1024-65535 TCP Permit Any 1024-65535 UDP Permit A switch with Fabric OS v6.2.0 or later will have a default IP Filter policy for IPv4 and IPv6. The default IP Filter policy cannot be deleted or changed. When an alternative IP Filter policy is activated, the default IP Filter policy becomes deactivated. Table 34 lists the rules of the default IP Filter policy. TABLE 34 Default IP policy rules Rule number Source address Destination port Protocol Action 1 Any 2 Any 3 Any 4 Any 5 Any 6 Any 7 Any 9 Any 10 Any 11 Any 12 Any 22 TCP 23 TCP 897 TCP 898 TCP 111 TCP 80 TCP 443 TCP 161 UDP 111 UDP 123 UDP 600-1023 UDP Permit Permit Permit Permit Permit Permit Permit Permit Permit Permit Permit 156 Fabric OS Administrator's Guide 53-1001763-01