Configuring the ACL settings of the DANPU network

The ACL (Access Control List) defines the access settings for the DANPU<no>. You can add and delete ACL entries for the DANPU<no>.

>	Select Hardware -> IP networks -> Data Network Public -> [<se server> (SE<model>) ->] DANPU<no>, ACL tab.

The ACL tab displays a list of the ACL settings.

Changing an ACL setting

You can:

• • enable or disable an ACL and associated network access control on a network-specific basis (for IPv4 and IPv6 separately),

  • select the ACL mode (permit or deny). In permit (whitelist) mode only the ports/services contained in the ACL are permitted network access. All other services are locked. In deny (blacklist) mode only the ports/services contained in the ACL are locked.

    >	In the ACL settings group click the Change icon by the required entry and enter the new settings in the subsequent dialog box.

If you set permit mode and enable ACL without entering services in the list, network access is locked for all services.

Adding a service to the ACL

>	In the ACL IPv4 rules or ACL IPv6 rules group click Deny service (in the case of ACL mode deny) or Grant service (in the case of ACL mode permit) and select the ports and the services associated with them which are to be added to the ACL.

Removing a service from the ACL

>	In the ACL IPv4 rules or ACL IPv6 rules group click the Remove icon by the required entry and confirm the action.