The faculty role is configured with:
Create a policy role that applies a CoS 8 to data VLAN 10 and configures it to rate-limit traffic to 1M with a moderate priority of 5.
FacultyFS->configure policy profile 4 name faculty pvid-status enable pvid 10 cos-status enable cos 8
Configure the RADIUS (Remote Authentication Dial In User Service) server user accounts with the appropriate tunnel information using VLAN authorization and policy filter-ID for faculty role members and devices. Enable hybrid authentication. Set a VLAN-to-policy mapping. This mapping is ignored if the RADIUS filter-ID attribute is present in the RADIUS response message.
FacultyFS->configure policy maptable response both FacultyFS->configure policy maptable 10 4
Forward traffic on UDP source port for IP address request (68), and UDP destination ports for protocols DHCP (Dynamic Host Configuration Protocol) (67) and DNS (53). Drop traffic on UDP source ports for protocols DHCP (67) and DNS (53). Drop traffic for protocols SNMP (Simple Network Management Protocol) (161), SSH (22), Telnet (23) and FTP (20 and 21) on both the data and phone VLANs
FacultyFS->configure policy rule 4 udpsourceport 68 mask 16 forward FacultyFS->configure policy rule 4 udpdestport 67 mask 16 forward FacultyFS->configure policy rule 4 udpdestport 53 mask 16 forward FacultyFS->configure policy rule 4 udpsourceportIP 67 mask 16 drop FacultyFS->configure policy rule 4 udpsourceportIP 53 mask 16 drop FacultyFS->configure policy rule 4 udpdestportIP 16 mask 16 drop FacultyFS->configure policy rule 4 tcpdestportIP 22 mask 16 drop FacultyFS->configure policy rule 4 tcpdestportIP 23 mask 16 drop FacultyFS->configure policy rule 4 tcpdestportIP 20 mask 16 drop FacultyFS->configure policy rule 4 tcpdestportIP 21 mask 16 drop
Faculty should only be allowed access to the services (subnet 10.10.50.0/24) and the faculty servers (subnet 10.10.70.0/24) and should be denied access to the administrative server (subnet 10.10.60.0/24).
FacultyFS->configure policy rule 4 ipdestsocket 10.10.60.0 mask 24 drop
Print
this page
Email this topic
Feedback
View PDF
Download EPUB