Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Create Protocols

Use the Create Protocol page to create TCP, UDP, MS-RPC, SUN-RPC, ICMP, ICMPv6, and other protocols, that can be used in services. A service refers to an application on a device. Services are based on protocols and ports used by an application.

To create a protocol:

  1. Select Shared Services > Objects > Services.

    The Services page appears.

  2. Click the add icon (+) to create service or service group.

    The Create Services page appears.

  3. Click the add icon (+) that appears above the Protocols table.

    The Create Protocol page appears.

  4. Complete the configuration of the protocol according to the guidelines provided in Table 1 and Table 2.
  5. Click OK to save the changes. If you want to discard your changes, click Cancel instead.

    A new protocol with the configuration you provided is created within the service.

    Table 1 provides guidelines on using the fields to create a protocol.

    Table 1: Fields on Create Protocol Page Settings

    Field

    Description

    General Information

    Name

    Enter a unique name for the protocol. The name must begin with an alphanumeric character and can contain alphanumeric characters and some special characters (colons, hyphens, forward slashes, periods, and underscores); 63-character maximum.

    Description

    Enter a description for your protocol. The description can contain alphanumeric characters and special characters (excluding ampersand, lesser than (<) and greater than (>), and newline (\n)); 900-character maximum.

    You should make this description as useful as possible for all administrators.

    Type

    Select the type of the protocol you want to create and fill in the corresponding fields. The available types of protocols are: TCP, UDP, ICMP, SUN-RPC, MS-RPC, ICMPv6, and so on. If you select TCP or UDP, continue with this table. See Table 2 for the other protocol types.

    Destination Port

    Enter a destination port number for TCP. The range is from 0 to 65, 535.

    Advanced Settings

    Inactivity Timeout

    Enable this option to specify the amount of time the protocol can be inactive before it times out.

    Timeout Duration

    Enter a timeout value for this protocol. The value range is 4 to 86400 seconds.

    ALG

    Select an ALG (Application Layer Gateway) service option if applicable.

    Source Ports and Port Ranges

    Enter the source port or port range for the protocol.

    Table 2 includes the settings and guidelines for the various protocol types.

    Table 2: Create Protocol Type Settings

    Field

    Description

    ICMP

    ICMP Type

    Enter a value from 0 through 225 for the ICMP message type. For example, enter 1 for host unreachable. You can find these values in RFC 792.

    ICMP Code

    Enter a value from 0 through 225 for the ICMP code. For example, enter 0 for echo reply. You can find these values in RFC 792.

    SUN-RPC

    RPC Program Number

    Enter a value or value range for the RPC (remote procedure call) service. For example, enter 100,017 for remote execution. You can find these values in RFC 5531.

    Protocol Type

    Select TCP or UDP for the protocol type.

    MS-RPC

    UUID

    Enter the corresponding UUID value for the MS-RPC service. For predefined values, refer to MS-RPC UUID Mappings.

    Protocol Type

    Select TCP or UDP for the protocol type.

    ICMPv6

    ICMP Type

    Enter a value from 0 through 225 for the ICMPv6 message type. You can find these values in RFC 4443.

    ICMP Code

    Enter a value from 0 through 225 for the ICMPv6 code. You can find these values in RFC 4443.

    SCTP, RSVP, PIM, OSPF, IPIP, IGMP, GRE, ESP, EGP, AH, and Other

    Protocol Number

    Enter a protocol number for the protocol type. This number identifies the service in the next higher level in the protocol stack to which data is passed.