Users Guide

Dell PowerConnect ArubaOS 5.0 | User Guide External Services Interface | 587
d. Repeat the steps to configure additional rules. (This example adds a rule that specifies
any, any, any, permit.)
e. Click Done to return to the User Roles tab.
3. To apply the configuration (changes), click Apply. (The configuration will not take effect until you click
Apply.)
4. Refer to Chapter 10, “Roles and Policies” on page279, for directions on how to apply a policy to a user role.
In the CLI
Use these commands to define the redirection filter for sending traffic to the ESI server and apply the firewall
policy to a user role in the route-mode ESI topology example.
ip access-list session policy
any any any redirect esi-group group direction both blacklist
//For any incoming traffic, going to any destination,
//redirect the traffic to servers in the specified ESI group.
any any any permit
//For everything else, allow the traffic to flow normally.
user-role role
access-list {eth | mac | session}
bandwidth-contract name
captive-portal name
dialer name
pool {l2tp | pptp}
reauthentication-interval minutes
session-acl name
vlan vlan_id
For example:
ip access-list session fortinet
any any svc-http redirect esi-group fortinet direction both blacklist
any any any permit
user-role guest
access-list session fortinet
Syslog Parser Domain and Rules
The following sections describe how to configure the syslog parser domain and rules for the route-mode example
using the WebUI and CLI.
Add a New Syslog Parser Domain in the WebUI
To add a new syslog parser domain for the routed example:
1. Click Add in the Syslog Parser Domains tab (Advanced Services > External Services > Syslog Parser
Domain).
The system displays the new domain view.
2. In the Domain Name text box, type the name of the domain to be added.
3. In the Server (IP Address) text box, type a valid IP address.
4. Click << Add.
5. Click Apply.
Note: You must ensure that you type a valid IP address, because the IP address you type is not automatically validated against the
list of external servers that has been configured.