Users Guide

578 | External Services Interface Dell PowerConnect ArubaOS 5.0 | [User Guide
In the CLI
Use these commands to define the redirection filter for sending traffic to the ESI server and apply the firewall
policy to a user role.
ip access-list session policy
any any any redirect esi-group group direction both blacklist
//For any incoming traffic, going to any destination,
//redirect the traffic to servers in the specified ESI group.
any any any permit
//For everything else, allow the traffic to flow normally.
user-role role
access-list {eth | mac | session}
bandwidth-contract name
captive-portal name
dialer name
pool {l2tp | pptp}
reauthentication-interval minutes
session-acl name
vlan vlan_id
For example:
ip access-list session fortinet
any any svc-http redirect esi-group fortinet direction both blacklist
any any any permit
user-role guest
access-list session fortinet
ESI Syslog Parser Domains and Rules
To configure the ESI syslog parser, navigate to the Configuration > Advanced Services > External Services view
on the WebUI (see ).
The following sections describe how to manage syslog parser domains using the WebUI and CLI.
Managing Syslog Parser Domains in the WebUI
Click on the Syslog Parser Domains tab to display the Syslog Parser Domains view.
This view lists all the domains by domain name and server IP address, and includes a list of peer controllers (when
peer controllers have been configured—as described in “Peer Controllers” on page573).
Adding a new syslog parser domain
To add a new syslog parser domain:
1. Click Add in the Syslog Parser Domains section. The system displays the add domain view.
2. In the Domain Name text box, type the name of the domain to be added.
3. In the Server (IP Address) text box, type a valid IP address.
4. Click << Add.
5. Click Apply.
Note: You must ensure that you type a valid IP address, because the IP address you type is not automatically validated against the
list of external servers that has been configured.