beautypg.com

Ippolicy – Amer Networks E5 CLI User Manual

Page 172

background image

3.55. IPPolicy

Description

An IP Policy specifies what action to perform on network traffic that matches the specified filter
criteria.

Properties

Index

The index of the object, starting at 1. (Identifier)

Name

Specifies a symbolic name for the policy.

Action

Allow or Deny. (Default: Allow)

SourceInterface

Specifies the name of the receiving interface to be
compared to the received packet.

DestinationInterface

Specifies the the destination interface to be
compared to the received packet.

SourceNetwork

Specifies the sender span of IP addresses to be
compared to the received packet.

DestinationNetwork

Specifies the span of IP addresses to be compared
to the destination IP of the received packet.

Service

Specifies a service that will be used as a filter
parameter when matching traffic with this rule.

Schedule

By adding a schedule to a rule, the security
gateway will only allow that rule to trigger at those
designated times. (Optional)

SourceAddressTranslation

Action to take on source address. (Default: Auto)

NATSourceAddressAction

Specify method to determine which sender
address to use. (Default: OutgoingInterfaceIP)

SATSourceAddressAction

Specify method to determine which sender
address to use.

SourceNewIP

Specifies which sender address will be used.

SourceBaseIP

Specifies base address for sender address.

SourceNATPool

Specifies NAT Pool to fetch sender address to be
used.

SourcePortAction

Specify method to determine which port action to
use. (Default: None)

SourceNewSinglePort

Translate to this port. (Optional)

SourceBasePort

Transpose using as base this port. (Optional)

DestAddressTranslation

Action to take on destination address. (Default:
None)

DestAddressAction

Specify method to determine which destination

Chapter 3: Configuration Reference

172

This manual is related to the following products: