Cisco Cisco Packet Data Gateway (PDG) Manual De Manutenção

Página de 512
Generally Available    06-30-2010
Firewall Features in Release 8.0
1-21
Firewall Features in Release 8.0
This section provides information for new features in the Stateful Firewall product in 
Release 8.0.
ACS and Stateful Firewall Integration
The integration of Stateful Firewall and Enhanced Charging Service in this release has 
resulted in the following changes:
Firewall Configuration Mode—This mode is no longer available.
Firewall ALG Configuration Mode—This mode is no longer available.
Firewall Policy Configuration Mode—This mode is no longer available.
ACS Firewall Ruledef Configuration Mode—This new mode is available under the 
ACS Configuration mode. Firewall rule definitions are configured in this mode.
Firewall Rulebase Configuration Mode—This mode is no longer available. Both ACS 
and Firewall ruledefs are now included in ACS rulebases.
Firewall Host Pool Configuration Mode—Moved under the ACS Configuration Mode, 
and renamed to ACS Host Pool Configuration Mode.
Firewall IMSI Pool Configuration Mode—Moved under the ACS Configuration Mode, 
and renamed to ACS IMSI Pool Configuration Mode.
Firewall Port Map Configuration Mode—Moved under the ACS Configuration Mode, 
and renamed to ACS Port Map Configuration Mode.
Firewall Ruledef Configuration Mode
A new Firewall Ruledef Configuration mode is available in Release 8.0 under the ACS 
Configuration mode. Firewall rule definitions are configured in this mode.
Host Pool, IMSI Pool, and Port Map Support in ACS
The Host Pool, IMSI Pool, and Port Map configuration modes, which were specific to 
Stateful Firewall configuration, are moved under the ACS Configuration mode for Release 
8.0.
Licensing
With this release, if a Stateful Firewall license is installed on the system, Active Charging 
Services (ACS) will also be enabled. A separate ECSv2 license will not be required to 
enable ACS. However, if an ECSv2 license is installed on the system, a Firewall license is 
still required to enable Firewall.