Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Creating Protocols

Use the Create Protocol page to create TCP, UDP, MS-RPC, SUN-RPC, ICMP, and ICMPv6 protocols, that can be used in services. A service refers to an application on a device. Services are based on protocols and ports used by an application.

To create a protocol:

  1. Select Configuration > Shared Objects > Services.

    The Services page appears.

  2. Click the add icon (+) to create service or service group.

    The Create Services page appears.

  3. Click the add icon (+) that appears about the Protocols table.

    The Create Protocol page appears.

  4. Complete the configuration of the protocol according to the guidelines provided in Table 1 and Table 2.
  5. Click OK to save the changes. If you want to discard your changes, click Cancel instead.

A new protocol with the configuration you provided is created. You can use this protocol to create services.

Table 1 provides guidelines on using the fields to create a protocol.

Table 1: Fields on Create Protocol Page Settings

Field

Description

General Information

Name

Enter a unique name for the protocol. It must begin with an alphanumeric character and cannot exceed 63 characters; dashes and underscores are allowed.

Description

Enter a description for your protocol. It cannot exceed 1,024 characters.

Type

Select the type of the protocol you want to create and fill in the corresponding fields. The available types of protocols are: TCP, UDP, ICMP, SUN-RPC, MS-RPC, ICMPv6, and so on. If you select TCP, continue with this table. See Table 2 for the other protocol types.

Destination Port

Enter a destination port number for TCP. The range is from 0 to 65, 535.

Advanced Settings

Enable Inactivity Timeout

Enabled by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds or 2,160 minutes.

ALG

Select an ALG (Application Layer Gateway) service option if applicable.

Source Ports and Port Ranges

Enter the source port or port range for the protocol.

Table 2 includes the settings and guidelines for the various protocol types.

Table 2: Create Protocol Type Settings

Field

Description

UDP

Destination Port

Enter a destination port number for UDP. This is a value or value range from 0 through 65,535.

Advanced Settings

Enable Inactivity Timeout

Selected by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds and 2,160 minutes.

ALG

Select an ALG (Application Layer Gateway) service option if applicable.

Source Ports and Port Ranges

Enter a source port or port range for UDP. This is a value or value range from 0 through 65,535.

ICMP

Enable Inactivity Timeout

Enabled by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds and 2,160 minutes.

ICMP Type

Enter a value from 0 through 225 for the ICMP message type. For example, enter 1 for host unreachable. You can find these values in RFC 792.

ICMP Code

Enter a value from 0 through 225 for the ICMP code. For example, enter 0 for echo reply. You can find these values in RFC 792.

SUN-RPC

Destination Port (available if Enable ALG is selected)

Enter a destination port for SUN-RPC. This is a value or value range from 0 through 65,535.

Enable Inactivity Timeout

Enabled by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds and 2,160 minutes.

Enable ALG

Not selected by default. If you enable ALG for this protocol, you must enter a destination port in the field that becomes available.

RPC Program Number

Enter a value or value range for the RPC (remote procedure call) service. For example, enter 100,017 for remote execution. You can find these values in RFC 5531.

Protocol Type

Select TCP or UDP for the protocol type.

MS-RPC

Destination Port (available if Enable ALG is selected)

Enter a destination port for MS-RPC. This is a value or value range from 0 through 65,535.

Enable Inactivity Timeout

Enabled by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds and 2,160 minutes.

Enable ALG

Not selected by default. If you enable ALG for this protocol, you must enter a destination port number in the field that becomes available.

UUID

Enter the corresponding UUID value for the MS-RPC service. For predefined values, refer to MS-RPC UUID Mappings.

Protocol Type

Select TCP or UDP for the protocol type.

ICMPv6

Enable Inactivity Timeout

Selected by default. Enter a timeout value for this protocol in seconds or minutes. The maximum values are 129,600 seconds and 2,160 minutes.

ICMP Type

Enter a value from 0 through 225 for the ICMPv6 message type. You can find these values in RFC 4443.

ICMP Code

Enter a value from 0 through 225 for the ICMPv6 code. You can find these values in RFC 4443.

Destination Port

Use other to create protocols that do not match the provided type categories. Enter a destination port for the other protocol. This is a value or value range from 0 through 65,535.