Dell W-Series 228 Instant 6.5.1.0-4.3.1.0 User Guide - Page 180

Table 39: Access Rule Configuration Parameters Service Category Description Network Select a service from the list of available services. You can allow or deny access to any or all of the services based on your requirement: l any-Access is allowed or denied to all services. l custom-Available options are TCP, UDP, and Other. If you select the TCP or UDP options, enter appropriate port numbers. If you select the Other option, enter the appropriate ID. NOTE: If Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) use the same port, ensure that you configure separate access rules to permit or deny access. Action Select any of following actions: l Select Allow to allow access to users based on the access rule. l Select Deny to deny access to users based on the access rule. l Select Destination-NAT to allow making changes to the destination IP address. l Select Source-NAT to allow making changes to the source IP address. Default: All client traffic is directed to the default VLAN. Tunnel: The traffic from the Network Assigned clients is directed to the VPN tunnel. VLAN: Specify the non-default VLAN ID to which the guest traffic needs to be redirected to. Destination Select a destination option for the access rules for network services, applications, and application categories. You can allow or deny access to any the following destinations based on your requirements. l to all destinations- Access is allowed or denied to all destinations. l to a particular server-Access is allowed or denied to a particular server. After selecting this option, specify the IP address of the destination server. l except to a particular server-Access is allowed or denied to servers other than the specified server. After selecting this option, specify the IP address of the destination server. l to a network-Access is allowed or denied to a network. After selecting this option, specify the IP address and netmask for the destination network. l except to a network-Access is allowed or denied to networks other than the specified network. After selecting this option, specify the IP address and netmask of the destination network. l to domain name-Access is allowed or denied to the specified domains. After selecting this option, specify the domain name in the Domain Name text box. Log Select the Log check box if you want a log entry to be created when this rule is triggered. Instant supports firewall-based logging. Firewall logs on the W-IAPs are generated as security logs. Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Roles and Policies | 180