Service groups, Adding an ip protocol service – Amer Networks E5Web GUI User Manual
Page 150
IP protocol numbers
The currently assigned IP protocol numbers and references are published by the Internet
Assigned Numbers Authority (IANA) and can be found at:
Example 3.14. Adding an IP Protocol Service
This example shows how to add an IP Protocol service, with the Virtual Router Redundancy
Protocol.
Command-Line Interface
Device:/> add Service ServiceIPProto VRRP IPProto=112
InControl
Follow the same steps used for the Web Interface below.
Web Interface
1.
Go to: Objects > Services > Add > IP protocol service
2.
Specify a suitable name for the service, for example VRRP
3.
Enter 112 in the IP Protocol control
4.
Optionally enter Virtual Router Redundancy Protocol in the Comments control
5.
Click OK
3.3.5. Service Groups
A Service Group is, exactly as the name suggests, a cOS Core object that consists of a collection of
services. Although the group concept is simple, it can be very useful when constructing security
policies since the group can be used instead of an individual service.
The Advantage of Groups
For example, there may be a need for a set of IP rules that are identical to each other except for
the service parameter. By defining a service group which contains all the service objects from all
the individual rules, we can replace all of them with just one IP rule that uses the group.
Suppose that we create a service group called email-services which combines the three services
objects for SMTP, POP3 and IMAP. Now only one IP rule needs to be defined that uses this group
service to allow all email related traffic to flow.
Groups Can Contain Other Groups
When a group is defined then it can contain individual services and/or service groups. This ability
to have groups within groups should be used with caution since it can increase the complexity of
Chapter 3: Fundamentals
150