Adding an ACL for the Management Interface

The new subconfiguration system-access-list is now part of the system configuration, and its model is similar to host routes. For each entry, you must define an IP destination address and mask; you can specify either the individual host or a unique subnet.

If you do not configure this list, then there will be no ACL/DoS protection for the Oracle® Enterprise Session Border Controller’s management interface.

You access the system-access-list via system path, where you set an IP address and netmask. You can configure multiple system ACLs using this configuration.

To add an ACL for the management interface:

1. In Superuser mode, type configure terminal and press Enter.

   ORACLE# configure terminal

2. Type system and press Enter to access the signaling-level configuration elements.

   ORACLE(configure)# system
   ORACLE(system)#

3. Type system-access-list and press Enter.

   ORACLE(system)# system-access-list
   ORACLE(system-access-list)#

4. source-address—Enter the IP address representing for the source network for which you want to allow traffic over the management interface.
5. netmask—Enter the netmask portion of the source network for the traffic you want to allow. The netmask is in dotted decimal notation.