Creating Protocols
Use the Create Protocol page to create TCP, UDP, MS-RPC, SUN-RPC, ICMP, and ICMPv6 protocols, that can be used in services. A service refers to an application on a device. Services are based on protocols and ports used by an application.
To create a protocol:
- Select Configuration > Shared Objects > Services.
The Services page appears.
- Click the add icon (+) to create service or service group.
The Create Services page appears.
- Click the add icon (+) that appears about the Protocols table.
The Create Protocol page appears.
- Complete the configuration of the protocol according to the guidelines provided in Table 1 and Table 2.
- Click OK to save the changes. If you want to discard your changes, click Cancel instead.
A new protocol with the configuration you provided is created. You can use this protocol to create services.
Table 1 provides guidelines on using the fields to create a protocol.
Table 1: Fields on Create Protocol Page Settings
Field | Description |
|---|---|
| General Information | |
Name | Enter a unique name for the protocol. It must begin with an alphanumeric character and cannot exceed 63 characters; dashes and underscores are allowed. |
Description | Enter a description for your protocol. It cannot exceed 1,024 characters. |
Type | Select the type of the protocol you want to create and fill in the corresponding fields. The available types of protocols are: TCP, UDP, ICMP, SUN-RPC, MS-RPC, ICMPv6, and so on. If you select TCP, continue with this table. See Table 2 for the other protocol types. |
Destination Port | Enter a destination port number for TCP. The range is from 0 to 65, 535. |
| Advanced Settings | |
Enable Inactivity Timeout | Enabled by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds or 2,160 minutes. |
ALG | Select an ALG (Application Layer Gateway) service option if applicable. |
Source Ports and Port Ranges | Enter the source port or port range for the protocol. |
Table 2 includes the settings and guidelines for the various protocol types.
Table 2: Create Protocol Type Settings
Field | Description |
|---|---|
| UDP | |
Destination Port | Enter a destination port number for UDP. This is a value or value range from 0 through 65,535. |
| Advanced Settings | |
Enable Inactivity Timeout | Selected by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds and 2,160 minutes. |
ALG | Select an ALG (Application Layer Gateway) service option if applicable. |
Source Ports and Port Ranges | Enter a source port or port range for UDP. This is a value or value range from 0 through 65,535. |
| ICMP | |
Enable Inactivity Timeout | Enabled by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds and 2,160 minutes. |
ICMP Type | Enter a value from 0 through 225 for the ICMP message type. For example, enter 1 for host unreachable. You can find these values in RFC 792. |
ICMP Code | Enter a value from 0 through 225 for the ICMP code. For example, enter 0 for echo reply. You can find these values in RFC 792. |
| SUN-RPC | |
Destination Port (available if Enable ALG is selected) | Enter a destination port for SUN-RPC. This is a value or value range from 0 through 65,535. |
Enable Inactivity Timeout | Enabled by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds and 2,160 minutes. |
Enable ALG | Not selected by default. If you enable ALG for this protocol, you must enter a destination port in the field that becomes available. |
RPC Program Number | Enter a value or value range for the RPC (remote procedure call) service. For example, enter 100,017 for remote execution. You can find these values in RFC 5531. |
Protocol Type | Select TCP or UDP for the protocol type. |
| MS-RPC | |
Destination Port (available if Enable ALG is selected) | Enter a destination port for MS-RPC. This is a value or value range from 0 through 65,535. |
Enable Inactivity Timeout | Enabled by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds and 2,160 minutes. |
Enable ALG | Not selected by default. If you enable ALG for this protocol, you must enter a destination port number in the field that becomes available. |
UUID | Enter the corresponding UUID value for the MS-RPC service. For predefined values, refer to MS-RPC UUID Mappings. |
Protocol Type | Select TCP or UDP for the protocol type. |
| ICMPv6 | |
Enable Inactivity Timeout | Selected by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds and 2,160 minutes. |
ICMP Type | Enter a value from 0 through 225 for the ICMPv6 message type. You can find these values in RFC 4443. |
ICMP Code | Enter a value from 0 through 225 for the ICMPv6 code. You can find these values in RFC 4443. |
Destination Port | Use other to create protocols that do not match the provided type categories. Enter a destination port for the other protocol. This is a value or value range from 0 through 65,535. |