Setting port labels
You can create port labels to represent a list of ports in the Port Labels page.
You can use a port label to specify a set of ports and then apply a single in-path rule or load-balancing rule to the port label, rather than configuring rules for each port. Using port labels reduces the number of configuration rules in the system.
Default port labels
The system provides these types of port labels by default:
• Interactive—Ports that commonly carry interactive traffic (such as Telnet, TCP ECHO, remote logging, and shell). The SteelHead and other appliances in the system automatically forward traffic carried on these ports. Use the Interactive port label in in-path rules and load-balancing rules to automatically pass through traffic on interactive ports. Port numbers include 7, 23, 37, 107, 179, 513, 514, 1494, 1718 to 1720, 2000 to 2003, 2427, 2598, 2727, 3389, 5060, 5631, 5900 to 5903, and 6000.
• RBT-Proto—Ports used by the SteelHead and other appliances in the system: 7744 (data store synchronization), 7800 to 7801 (in-path), 7810 (out-of-path), 7820 (failover), 7850 (connection forwarding), 7860 (SteelHead Interceptor), and 7870 (Client Accelerator Controller).
• Secure—Ports that commonly carry secure traffic (SSH, HTTPS, and SMTPS). The SteelHead and other appliances in the system automatically forward traffic carried on these ports. Use the Secure port label in in-path rules and load-balancing rules to automatically pass through traffic on secure ports. Port numbers include 22, 49, 261, 443, 448, 465, 563, 585, 614, 636, 684, 695, 989, 990, 992 to 995, 1701, 1723, 2252, 2478, 2479, 2482, 2484, 2492, 2679, 2762, 2998, 3077, 3078, 3183, 3191, 3220, 3269, 3410, 3424, 3471, 3496, 3509, 3529, 3539, 3660, 3661, 3713, 3747, 3864, 3885, 3896, 3897, 3995, 4031, 5007, 5061, 7674, 7781, 7782, 9802, 11751, and 12109.
• All—When you are managing port labels, you can select all port types by selecting the check box in the table header. Specifies ports 1 to 65535.
If you order rules so that traffic that is passed through, discarded, or denied is filtered first, All represents all remaining ports.
Ports 7881 and 7882 are used for TLS optimization.
Creating port labels
You can create a port label to represent a list of ports in the Port Labels page.
To create a port label
1. Choose Networking > Network Services: Port Labels to display the Port Labels page.
2. Complete the configuration as described in this table.
Control | Description |
Add a New Port Label | Displays the controls to add a new port label. |
Name | Specify the label name. These rules apply: • Port labels are not case sensitive and can be any string consisting of letters, the underscore ( _ ), or the hyphen ( - ). Spaces are not allowed in port labels. • The fields in the various rule pages of the Management Console that take a physical port number also take a port label. • To avoid confusion, do not use a number for a port label. • Port labels that are used in in-path and other rules, such as peering rules, cannot be deleted. • Port label changes (that is, adding and removing ports inside a label) are applied immediately by the rules that use the changed port labels. |
Ports | Specify a comma-separated list of ports. |
Remove Selected | Select the check box next to the name and click Remove Selected. |
Add | Adds the port label. |
3. Click Save to save your changes to the running configuration.
Modifying port labels
You can modify ports associated with a port label by clicking on the label value in the list of port labels.
To modify ports in a port label
1. Choose Networking > Network Services: Port Labels to display the Port Labels page.
2. In the list of port labels, click the name of the port label you want to edit.
The list entry expands to display an editable list.
3. Under Ports, add or delete ports in the Editing Port Label <name> text box.
4. Click Apply to apply the modifications or click Cancel to cancel your changes.
Port label changes are applied immediately by the rules that use the port labels that you have modified.
5. Click Save to save your changes to the running configuration.