Create Protocols
Use the Create Protocol page to create TCP, UDP, MS-RPC, SUN-RPC, ICMP, ICMPv6, and other protocols, that can be used in services. A service refers to an application on a device. Services are based on protocols and ports used by an application.
To create a protocol:
-
Select Shared Services > Objects >
Services.
The Services page appears.
-
Click the add icon (+) to create service or service group.
The Create Services page appears.
-
Click the add icon (+) that appears above the Protocols
table.
The Create Protocol page appears.
- Complete the configuration of the protocol according to the guidelines provided in Table 1 and Table 2.
-
Click OK to save the changes. If you want to discard your
changes, click Cancel instead.
A new protocol with the configuration you provided is created within the service.
Table 1 provides guidelines on using the fields to create a protocol.
Table 1: Fields on Create Protocol Page Settings Field
Description
General Information
Name
Enter a unique name for the protocol. The name must begin with an alphanumeric character and can contain alphanumeric characters and some special characters (colons, hyphens, forward slashes, periods, and underscores); 63-character maximum.
Description
Enter a description for your protocol. The description can contain alphanumeric characters and special characters (excluding ampersand, lesser than (<) and greater than (>), and newline (\n)); 900-character maximum.
You should make this description as useful as possible for all administrators.
Type
Select the type of the protocol you want to create and fill in the corresponding fields. The available types of protocols are: TCP, UDP, ICMP, SUN-RPC, MS-RPC, ICMPv6, and so on. If you select TCP or UDP, continue with this table. See Table 2 for the other protocol types.
Destination Port
Enter a destination port number for TCP. The range is from 0 to 65, 535.
Advanced Settings
Inactivity Timeout
Enable this option to specify the amount of time the protocol can be inactive before it times out.
Timeout Duration
Enter a timeout value for this protocol. The value range is 4 to 86400 seconds.
ALG
Select an ALG (Application Layer Gateway) service option if applicable.
Source Ports and Port Ranges
Enter the source port or port range for the protocol.
Table 2 includes the settings and guidelines for the various protocol types.
Table 2: Create Protocol Type Settings Field
Description
ICMP
ICMP Type
Enter a value from 0 through 225 for the ICMP message type. For example, enter 1 for host unreachable. You can find these values in RFC 792.
ICMP Code
Enter a value from 0 through 225 for the ICMP code. For example, enter 0 for echo reply. You can find these values in RFC 792.
SUN-RPC
RPC Program Number
Enter a value or value range for the RPC (remote procedure call) service. For example, enter 100,017 for remote execution. You can find these values in RFC 5531.
Protocol Type
Select TCP or UDP for the protocol type.
MS-RPC
UUID
Enter the corresponding UUID value for the MS-RPC service. For predefined values, refer to MS-RPC UUID Mappings.
Protocol Type
Select TCP or UDP for the protocol type.
ICMPv6
ICMP Type
Enter a value from 0 through 225 for the ICMPv6 message type. You can find these values in RFC 4443.
ICMP Code
Enter a value from 0 through 225 for the ICMPv6 code. You can find these values in RFC 4443.
SCTP, RSVP, PIM, OSPF, IPIP, IGMP, GRE, ESP, EGP, AH, and Other Protocol Number
Enter a protocol number for the protocol type. This number identifies the service in the next higher level in the protocol stack to which data is passed.