Manual Chapter :
Managing Port Lists
Applies To:
Show Versions![Show Versions](/etc/designs/pcx/techdocs/images/expandversions.gif)
BIG-IQ Centralized Management
- 6.0.1
Managing Port Lists
About port lists
Port lists
are collections of ports, port ranges, or port lists that can be
assigned to firewall rules.Firewall rules use port lists to allow or deny access to specific ports in IP packets. They
compare a packet's source port and/or destination port with the ports in a port list. If there is
a match, the rule takes an action, such as accepting or dropping the packet. Port lists must
contain at least one entry. You cannot create an empty port list; you cannot remove an entry in a
port list if it is the only one.
Before nesting a port list inside
a port list, check to be sure this option is supported on the BIG-IP® device
where you intend to deploy the port list.
Create port lists
You create port lists so that you
can use them when creating firewall rules.
- Click.
- ClickCreate.The New Port List screen opens.
- On the left, clickPropertiesand specify the settings for the port list.
- In theNamesetting, type a unique name for the port list.
- In theDescriptionsetting, type an optional description for the port list.
- In thePartitionsetting, type a different partition if needed. TheCommonpartition is the default.
- On the left, clickPorts.You must supply at least one entry in the port list, such as a port, port list, or port range.The screen displays a blank port entry template for you to complete.
- In the Type column, supply the type of port entry to add to the port list.
- To add a single port, selectPort.
- To add a port list, selectPort List.
- To add a range of ports, selectPort Range.
Before nesting a port list inside a port list, check that this option is supported on the specific version of your BIG-IP® device. - In the Ports column, supply the port details for the port type you selected.
- If you selectedPortas the type, type a port number.
- If you selectedPort Listas the type, select the name of the port list.
- If you selectedPort Rangeas the type, type the beginning and ending port numbers.
- In the Description column, provide an optional meaningful description of the port entry.
- To add more than one port entry to the port list, click the+in theAdd/Removecolumn, and provide the details.ClickUpdateto update and save the port entry you are currently editing.
- Continue to add or delete ports until the port list is complete.
- ClickSaveto save your work on the port list.
Edit port lists
You edit port lists to change the
properties of the port list, or to add, modify, or remove port entries from the port
list, or both.
- Click.
- Click the name of the port list to edit.
- If you are modifying the port list description, clickProperties, and type or modify theDescriptionsetting.Only the description property can be modified.
- If you are modifying the port entries, on the left, clickPorts.
- Add, modify, or delete port entries in the port list.
- To modify a port entry, click the pencil icon in that row.
- To delete a port entry, clickXin theAdd/Removecolumn.
- To add a port entry, click+in theAdd/Removecolumn.
A port list must contain at least one port entry. - If you are adding or modifying a port entry, supply or modify the settings.
- In the Type column, supply the type of port entry to add to the port list.
- To add a single port, selectPort.
- To add a port list, selectPort List.
- To add a range of ports, selectPort Range.
Before nesting a port list inside a port list, check that this option is supported on the specific version of your BIG-IP® device. - In the Ports column, supply the port details for the port type you selected.
- If you selectedPortas the type, type a port number.
- If you selectedPort Listas the type, select the name of the port list.
- If you selectedPort Rangeas the type, type the beginning and ending port numbers.
- In the Description column, provide an optional meaningful description of the port entry.
- Continue to add, modify, or delete port entries in the port list until the port list is complete.
- Save your work.
Clone port lists
You can clone a port list to create
a copy of it, which you can then edit.
- Click.The Port Lists screen opens.
- Click the check box next to the port list you want to clone.
- ClickClone.A copy of that port list is created with the same name, but with-CLONEappended to the name and a blankDescriptionfield.
- Change the port list as needed.
- Save your work.
The new port list is defined and you
can now assign it to a firewall rule.
Rename port
lists
You rename a port list when you want to make that
name more accurate or distinct. Renaming a port list causes a new port list to be
created and the old port list to be deleted in a single transaction. All references to
the old port list are updated to refer to the renamed port list.
- Click.
- Select the check box next to the port list to rename.
- ClickRename.A dialog box displays.
- Enter the new name in the dialog box and clickSave.The BIG-IQ system shows the status of the renaming operation in the dialog box.
- ClickCloseto exit the dialog box.
The port list has been renamed.
Deploy port lists
If you want to do a quicker deployment by only
deploying the port list portion of a configuration, you can do a partial deployment of
the port list, instead of deploying the entire configuration.
- Click.The Port Lists screen opens.
- Click the check box next to the port list you want included in the partial deployment.
- ClickDeploy.
The system displays the selected port list, with options for partial deployment
selected.
Continue the partial deployment process.
Delete port lists
You can delete port lists that you
no longer use to avoid confusion in the user interface.
- Click.The Port Lists screen opens.
- Click the check box next to the port list to delete.
- ClickDelete.
- In the confirmation dialog box that opens, clickDeleteto confirm the removal.