SonicOS 7.1 Objects
Table of Contents
Configuration Example
Assume an administrator needs to allow RSVP (Resource Reservation Protocol - IP Type 46) and SRP (Spectralink™ Radio Protocol – IP type 119) from all clients on the WLAN zone (WLAN Subnets) to a server on the LAN zone (for example, 10.50.165.26). You can define custom IP type service objects to handle these two services.
To define a custom IP type service and related configuration
-
Add custom service objects according to Adding Service Objects using Custom Protocols.
Enter the protocol numbers as 46 and 119.
-
Add a service group named myServices according to Adding Custom Service Groups.
Select the custom service objects created in step 1 from Not in Group list and click right arrow to add to the service group.
-
Add an address object for Host type and WLAN zone according to Adding Address Objects that the WLAN Subnets can access using myServices.
Enter the Host IP address as 10.50.165.26.
-
Define a WLAN > LAN access rule or security policy with Source / Destination attributes listed in the below table.
- Classic Mode: An Access Rule on the POLICY | Rules and Policies > Access Rules page. For more information, refer to Configuring Access Rules section in SonicOS 7.1 Rules and Policies Administration Guide for Classic Mode.
- Policy Mode: A Security Policy on the POLICY | Rules and Policies > Security Policy. For more information, refer to Security Policy section in SonicOS 7.1 Rules and Policies Administration Guide for Policy Mode.
Attribute Source Destination Zone/Interface WLAN LAN Address WLAN Subnets Host address object created in step 3 Port/Services Any myServices service group created in step 2 It may be necessary to create an access rule or security policy for bi-directional traffic. For example, an additional access rule or security policy from the LAN > WLAN allowing myServices from 10.50.165.26 to WLAN Subnets.
Now the traffic from IP protocols 46 and 119 is recognized and allowed to pass from WLAN Subnets to the host at 10.50.165.26.